Vulnerability Management Analyst

Client: SCC

Title: Vulnerability Management Analyst

Duration: 12+ Months

Location: Richmond, VA (Hybrid)

Ideal Candidate Profile:

·        Seeking a Risk & Vulnerability Analyst with hands-on experience in vulnerability management, security scanning, risk analysis, and remediation support across enterprise environments. to support vulnerability assessment and risk analysis activities.

·        This role is responsible for conducting vulnerability scanning and analysis, supporting remediation efforts, supporting scanning operations, and helping improve enterprise visibility into security weaknesses and cyber risks.

·        They should be skilled in troubleshooting and automating vulnerability scans, compliance assessments, API security scanning, and reporting, with proficiency in Microsoft, SharePoint, and Power BI.

·        Strong analytical, communication, and problem-solving skills with the ability to work independently and collaboratively are essential.

Job Responsibilities

·        Perform vulnerability assessments and assist security scanning across operating systems, databases, web applications, and enterprise infrastructure

·        Analyze vulnerabilities and support development of remediation recommendations

·        Support cloud compliance scans and assessment activities

·        Help troubleshoot scanning issues and support maintenance of vulnerability scanning tools, consoles, and configurations

·        Support automated and scheduled scanning activities, including scan planning, execution, and reporting

·        Support ad hoc or emergency vulnerability scanning in support of incident investigation and response activities

·        Create and maintain scan reports, data feeds, scan policies, repositories, and user access/roles for assessment tools

·        Support API discovery and scanning, and integration of assessment data into third-party tools

·        Coordinate with SCC Security Operations team to support tool operations, testing, and vulnerability management activities

Required Skills & Experience

·        Information Security-related experience

·        Software Vulnerability Management related experience

·        Experience troubleshooting vulnerability scan tools and scan configurations

·        Experience with automation supporting vulnerability assessment operations

·        Experience supporting Information System Vulnerability Management (ISVM) scans and compliance activities

·        Experience with API discovery and security scanning

·        Experience and proficiency with Microsoft, SharePoint and Power BI

·        Proven analytical and problem-solving abilities

·        Excellent verbal and written communication skills

·        Ability to work independently with minimal direction and as a team

·        Highly motivated and self-directed