VULNERABILITY MGMT ANALYST

• Active Top Secret clearance, with the ability to maintain it.

• Must have or be able to obtain a CompTIA Security+ CE certification within 120 days of employment, in accordance with DoDM 8140.03 and DFARS 252.239-7001.

• Minimum of 3 years working as a System Administrator, Systems Engineer, Network Administrator, Vulnerability Analyst, or similar role.

• Proficient understanding of computer hardware, software, and operating systems — primarily Microsoft Windows Server and Red Hat Enterprise Linux — with strong system troubleshooting skills across both.

• Working knowledge of vulnerability scanning products such as Rapid7 (preferred), Tenable Security Center/Nessus (ACAS), or Qualys.

• Experience with patch management tools such as PDQ Deploy, SCCM/MECM, WSUS, YUM/DNF, or Red Hat Satellite — including testing and qualifying patches prior to deployment, coordinating change-managed maintenance windows, and executing rollback when required.

• Working scripting ability in PowerShell, Bash, or Python sufficient to automate recurring scan parsing, patch orchestration, and reporting tasks.

• Strong interpersonal and written communication skills, with the ability to work autonomously, produce technical documentation, and negotiate remediation timelines with system owners who have competing priorities.

• TS/SCI access with polygraph.

• Advanced automation experience building patch orchestration or vulnerability reporting tooling.

• Experience patching and maintaining airgapped, standalone, or classified systems, including offline content management and update ingestion.

• Familiarity with DISA STIGs, SCAP Compliance Checker, and DoD or federal compliance frameworks (NIST 800-53, NIST 800-171, RMF).

• Experience with container and application dependency scanning, and with SBOM-based vulnerability identification.

• Experience managing vulnerabilities in third-party and line-of-business applications where a vendor pins supported runtime or library versions.

• Industry certifications such as CySA+, Network+, CCNA, RHCSA, Microsoft AZ-800/801 or MD-102, GIAC GCED/GEVA, or vendor certifications in Rapid7 or Tenable/ACAS.

• Bachelor's Degree in an Information Technology related discipline.

• Flextime Scheduling

• Bereavement

• Paid Time Off (PTO)

• Paid Parental Leave