Job Description Everforth ECS is seeking a
VM Analyst to work
remotely. At Everforth ECS Federal, we're driven by a commitment to excellence and innovation in solving complex challenges. As a premier provider of advanced technology solutions and services, our mission is to secure and optimize the most critical commercial, government, defense, and intelligence projects across the country. Our team is composed of dynamic professionals who thrive in a collaborative and empowering environment, where our team members leverage the latest technologies and insights to make a real-world impact. Join us and be part of a forward-thinking organization that values your expertise and supports your professional growth.
The Vulnerability Management Analyst is responsible for supporting vulnerability and exposure management operations across multiple client environments within an MSP SOC. This role focuses on vulnerability assessment, risk analysis, remediation coordination, client reporting, and operational support across diverse enterprise security monitoring technologies and vulnerability management platforms. This role works closely with the Exposure Management Team, Security Engineering Team, SOC analysts, client technical teams, and internal engineering teams to deliver high-quality vulnerability management services, actionable risk intelligence, and effective remediation support across a multi-client portfolio. This role requires the ability to seamlessly transition between client environments, adapt to varied technology stacks, and communicate complex security risks to both technical and executive audiences.
Salary Range: $100,000 - $115,000
General Description of Benefits
Required Skills - Experience: Minimum of 3-5 years of cybersecurity experience supporting vulnerability management or exposure management operations, preferably within an MSP, MSSP, or multi-client SOC environment.
- Multi-Client Operations: Proven ability to manage security operations across multiple client environments simultaneously, with strong organizational and context-switching capabilities.
- Vulnerability Management Platforms: Hands-on experience with multiple vulnerability management technologies such as Tenable (Nessus, Tenable.io, Tenable.sc), Crowdstrike Spotlight, or similar platforms.
- Risk Assessment Expertise: Strong analytical skills in vulnerability risk assessment, prioritization methodologies, CVSS scoring, exploitability analysis, and business impact evaluation.
- Client Communication Skills: Excellent verbal and written communication skills with demonstrated ability to explain technical security risks to diverse audiences including executives, IT teams, and non-technical stakeholders.
- Asset and Environment Knowledge: Strong understanding of enterprise infrastructure, cloud environments (AWS, Azure, Google Cloud Platform), container technologies, endpoint systems, and network architecture across varied enterprise configurations.
- Remediation Coordination: Experience coordinating vulnerability remediation efforts with IT teams, tracking remediation progress, and managing client expectations around timelines and priorities.
- Security Framework Knowledge: Familiarity with cybersecurity frameworks such as NIST Cybersecurity Framework, CIS Critical Security Controls, ISO 27001, and industry-specific compliance requirements.
- Able and willing to obtain a US Security Clearance.
- On-Call Support: Participates in on-call support to assist with security incident response, operational issues, and investigation activities to maintain continuous SOC coverage and response capabilities.
Desired Skills - MSP/MSSP Experience: Previous experience working in a managed security services provider (MSSP) or managed service provider (MSP) environment supporting multiple clients.
- Cloud Vulnerability Management: Experience supporting cloud-native vulnerability scanning and container security assessment (AWS, Azure, Google Cloud Platform, Kubernetes).
- Threat Intelligence Integration: Familiarity integrating cyber threat intelligence (CTI) and exploit intelligence feeds into vulnerability prioritization workflows.
- Security Data Analysis: Experience analyzing large-scale vulnerability data, trend analysis, and risk metrics.
- Scripting and Automation: Experience with scripting languages such as Python or PowerShell to support automation, API integrations, and reporting tasks.
- Compliance and Audit Support: Experience supporting vulnerability management requirements for compliance frameworks (PCI-DSS, FedRAMP, etc.).
- Penetration Testing Awareness: Understanding of penetration testing methodologies and how validated vulnerabilities inform remediation priorities.
- Excellent analytical and problem-solving skills, with the ability to investigate complex technical vulnerability issues and remediation challenges.
- Strong communication skills, with the ability to collaborate effectively with technical and non-technical stakeholders, and present risk information to clients and leadership.
#EverforthECS1
ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.
Everforth ECS is the federal segment of
Everforth , a $4B global organization with over 10,000 employees . Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.
Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.
We value:
- Attracting and developing top talent and high-performing teams
- Fostering a culture that is engaging, accountable, and mission-driven
Meet the challenge. Make a difference with Everforth ECS! 
Never miss an opportunity! Create an alert based on the job you applied for.
