Vulnerability Management Analyst

🕒 June 2

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Dragonfli Group

WebsiteLinkedInAll Job Openings

11 - 50 employees

The Dragonfli Group is a Washington, DC based LLC specializing in management and technology consulting. Dragonfli transforms its clients’ businesses by leveraging high impact strategic planning and technology solutions coupled with our deep expertise in infrastructure, corporate strategy and operations. The Dragonfli Group's passionate and experienced consultants take a collaborative approach to provide strategic planning and information security solutions to organizations looking to increase profitability, streamline operations, manage risk, meet regulatory demands and build market share.

📋 Description

• Lead and manage end-to-end vulnerability disclosure programs (VDP), including coordination with ethical hackers, system owners, and agency stakeholders. • Own attack surface management programs (e.g., CISA FAST), including scheduling, scope management, findings coordination, and POA&M documentation. • Manage and update Standard Operating Procedures (SOPs), SharePoint repositories, and program tracking documentation. • Operate and maintain enterprise vulnerability scanning platforms including Tenable.sc, Tenable.io, and web application scanning tools. • Scope, schedule, execute, and report on vulnerability scans across large, complex federal environments. • Track and drive remediation of critical, high, and all severity-tiered vulnerabilities to closure within program SLAs. • Build and maintain working relationships with CISA contacts, agency system owners, SOC personnel, and contractor teams.

🎯 Requirements

• 3+ years of hands-on vulnerability management experience within a federal agency environment. • Demonstrated program ownership: VDP, attack surface management, or equivalent independently managed programs. • Proficiency with Tenable.sc and/or Tenable.io (scan configuration, report generation, false positive management). • Experience with CISA programs (VDP, FAST, BOD compliance) or equivalent federal cybersecurity initiatives. • Working knowledge of ServiceNow or equivalent ITSM platforms for ticket management. • Ability to produce clean, accurate SOPs, POA&Ms, and stakeholder-facing documentation. • Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience. • Active security clearance or eligibility to obtain one preferred.

🏖️ Benefits

• Health, Dental, and Vision Insurance • PTO • 401(k) • Remote work flexibility • Exposure to high-impact federal cybersecurity programs • Direct access to firm leadership and career development opportunities