Vulnerability Management Analyst

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Copper River Technologies

WebsiteLinkedInAll Job Openings

11 - 50 employees

💼 Consulting

🎖️ Defense

📦 Logistics

Consulting • Defense • Logistics

Copper River Technologies is a Federally Recognized Alaskan Tribal-Owned, 8(a) Certified IT cyber defense solutions and service provider. The company offers expertise in cybersecurity, enterprise network infrastructure, mobility, and cloud services, dedicated to delivering technical products that help federal clients enhance their IT infrastructure and achieve mission success. Copper River Technologies prioritizes cost-effective solutions that allow clients to focus on innovation and performance.

📋 Description

• Perform vulnerability assessments and analysis across NIH information systems and infrastructure • Perform threat-informed prioritization using exploitability, threat intelligence, CISA Known Exploited Vulnerabilities (KEV), mission criticality, system exposure, and compensating controls • Assess vulnerability risk in the context of system criticality, data sensitivity, and organizational risk tolerance • Develop vulnerability dashboards, remediation metrics, trend analyses, and executive reporting products • Review and analyze vulnerability scan results from enterprise security tools • Validate findings to determine severity, exploitability, and potential impact • Conduct risk-based prioritization of vulnerabilities and security weaknesses • Coordinate with technical teams to assess remediation requirements and timelines • Manage the full lifecycle of vulnerability identification, remediation, and closure • Track vulnerabilities from discovery through remediation and validation • Maintain vulnerability repositories, remediation records, and status reporting • Monitor remediation progress and escalate overdue findings as appropriate • Verify corrective actions and document closure activities • Support continuous monitoring across NIH systems and applications • Analyze vulnerability trends and identify recurring issues • Evaluate security risks associated with discovered vulnerabilities • Collaborate with RMF/A&A teams to support Authorization to Operate (ATO) activities • Assist with management and tracking of Plans of Action and Milestones (POA&Ms) • Provide vulnerability-related evidence and documentation for audits, assessments, and authorization activities

🎯 Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field • Minimum 5 years of experience in cybersecurity, vulnerability management, information assurance, or security operations supporting Federal environments • Experience supporting POA&M development, remediation tracking, corrective action validation, or vulnerability closure activities • Experience conducting vulnerability assessments and remediation tracking • Familiarity with NIST RMF (SP 800-37) • Familiarity with NIST SP 800-53 Rev. 5 • Familiarity with FISMA • Familiarity with Federal cybersecurity compliance requirements • Familiarity with risk assessment methodologies • Experience analyzing vulnerability data and developing remediation recommendations • Strong analytical, problem-solving, and communication skills • Ability to obtain and maintain an NIH Public Trust • Preferred: Security+, CEH, CISSP, GVA, GISF, GSEC, CAP, CISM, or CRISC certification • Preferred: Experience supporting NIH, HHS, or other Federal civilian agencies • Preferred: Experience working within FISMA-compliant environments • Preferred: Knowledge of cloud security and vulnerability management practices • Preferred: Experience supporting CDM initiatives • Preferred: Understanding of FedRAMP and Zero Trust security principles • Preferred: Experience coordinating remediation activities across multiple stakeholders

🏖️ Benefits

• Comprehensive medical, dental, and vision coverage • Flexible Spending Account - healthcare and dependent care • Health Savings Account - high deductible medical plan • Retirement 401(k) with employer match • Open leave policy and paid holidays • Tuition reimbursement • Transportation expense account • Employee assistance program