Information Security Analyst IV / Security Engineer Vulnerability Management

Job Title: Information Security Analyst IV / Security Engineer Vulnerability Management

Location: Washington, DC (100% Onsite)

Duration: Long-Term Contract

We are seeking an experienced Information Security Analyst / Security Engineer with a strong background in Vulnerability Management to support a large Federal cybersecurity program. This role is ideal for professionals who have hands-on experience identifying, assessing, and coordinating the remediation of security vulnerabilities across enterprise environments.

Responsibilities

• Perform enterprise vulnerability assessments using Tenable Nessus.
• Analyze vulnerability scan results and prioritize remediation based on risk.
• Partner with system administrators, infrastructure teams, and application owners to coordinate remediation activities.
• Track remediation efforts and provide vulnerability status reporting to stakeholders.
• Support compliance with Federal cybersecurity standards, including FISMA and NIST 800-series guidelines.
• Work within ServiceNow to manage security-related tickets and remediation workflows.
• Participate in cybersecurity operations meetings and contribute to initiatives that strengthen the organization's overall security posture.
• Communicate technical findings and remediation recommendations to both technical and non-technical stakeholders.

Required Qualifications

• 6+ years of experience in Cybersecurity or Information Technology.
• Hands-on experience with Tenable Nessus or similar enterprise vulnerability scanning tools.
• Strong experience in Vulnerability Management, risk assessment, and remediation.
• Knowledge of FISMA, NIST 800-series, and Federal cybersecurity best practices.
• Experience coordinating remediation with cross-functional infrastructure and application teams.
• Strong verbal and written communication skills.

Preferred Qualifications

• Security certifications such as Security+, CISSP, CISM, CISA, CEH, OSCP, or GCIH.
• Experience with ServiceNow.
• Knowledge of cloud platforms, networking, firewalls, endpoint security, IDS/IPS, databases, and cybersecurity operations.