Vulnerability Management Analyst

🕒 Junho 2

Candidatar-se

Encontrar Vagas Remotas Similares

Receber Emails de Vagas Remotas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

Dragonfli Group

SiteLinkedInTodas as Vagas

11 - 50 funcionários

O Dragonfli Group é uma LLC sediada em Washington, DC, especializada em consultoria de gestão e tecnologia. A Dragonfli transforma os negócios de seus clientes alavancando o planejamento estratégico de alto impacto e soluções tecnológicas, juntamente com nossa profunda expertise em infraestrutura, estratégia corporativa e operações. Os consultores apaixonados e experientes do Dragonfli Group adotam uma abordagem colaborativa para fornecer planejamento estratégico e soluções de segurança da informação a organizações que buscam aumentar a rentabilidade, otimizar operações, gerenciar riscos, atender às exigências regulatórias e aumentar sua participação de mercado.

Descrição

• Lead and manage end-to-end vulnerability disclosure programs (VDP), including coordination with ethical hackers, system owners, and agency stakeholders. • Own attack surface management programs (e.g., CISA FAST), including scheduling, scope management, findings coordination, and POA&M documentation. • Manage and update Standard Operating Procedures (SOPs), SharePoint repositories, and program tracking documentation. • Operate and maintain enterprise vulnerability scanning platforms including Tenable.sc, Tenable.io, and web application scanning tools. • Scope, schedule, execute, and report on vulnerability scans across large, complex federal environments. • Track and drive remediation of critical, high, and all severity-tiered vulnerabilities to closure within program SLAs. • Build and maintain working relationships with CISA contacts, agency system owners, SOC personnel, and contractor teams.

🎯 Requisitos

• 3+ years of hands-on vulnerability management experience within a federal agency environment. • Demonstrated program ownership: VDP, attack surface management, or equivalent independently managed programs. • Proficiency with Tenable.sc and/or Tenable.io (scan configuration, report generation, false positive management). • Experience with CISA programs (VDP, FAST, BOD compliance) or equivalent federal cybersecurity initiatives. • Working knowledge of ServiceNow or equivalent ITSM platforms for ticket management. • Ability to produce clean, accurate SOPs, POA&Ms, and stakeholder-facing documentation. • Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience. • Active security clearance or eligibility to obtain one preferred.

🏖️ Benefícios

• Health, Dental, and Vision Insurance • PTO • 401(k) • Remote work flexibility • Exposure to high-impact federal cybersecurity programs • Direct access to firm leadership and career development opportunities