Job Title: Vulnerability Management Analyst
Location: Triangle, VA (Onsite)
Status: Full-time
Clearance: Active Top Secret clearance
Salary Range: $90,000-100,000 Annually with benefits
Yakshna Solutions, Inc., (YSI) is a CMMI Level 3 assessed, ISO 9001, 20000:1, 27001 certified, woman-owned small business enterprises, headquartered in Herndon, VA, USA. YSI provides professional IT solutions and services to business corporations and government organizations. YSI is committed to serving business communities as a leading IT vendor providing innovative, quality, and cost-effective IT business solutions and services.
We offer a competitive benefits package that includes the following: 401(k), health, dental, and vision insurance, life insurance, short-term and long-term disability insurance, paid time off, training, and professional development assistance.
YSI is seeking a Cybersecurity Analyst to support federal systems by driving security compliance and vulnerability management. In this role, you will manage the complete lifecycle of Risk Management Framework (RMF) packages, execute continuous monitoring, and ensure systems meet rigorous security standards.
Responsibilities:
· Guide security packages through all six steps of the NIST Risk Management Framework—from initial categorization and security control implementation through continuous monitoring.
· System Security Plans (SSPs), Risk Assessment Reports (RARs), Security Assessment Plans (SAPs), and Plan of Action and Milestones (POA&Ms).
· Perform routine vulnerability scans using tools like ACAS (Tenable) or HBSS/McAfee; track, triage, and remediate findings to reduce organizational risk.
· Audit, and validate DISA Security Technical Implementation Guides (STIGs) across servers, workstations, and network infrastructure.
· Maintain up-to-date compliance tracking, hardware/software baselines, and artifact uploads using the Enterprise Mission Assurance Support Service (eMASS).
· Utilize tools such as STIGMan, LanSweeper, SCAP, and SIEM platforms to support incident response, configuration management, and daily security posture assessments.
Required Skills and Qualifications:
· Experience with the NIST Risk Management Framework (RMF). Employees should have practical experience with moving a system/RMF package through all steps from categorization to continuous monitoring.
· Experience creating/updating System Security Plans (SSP), Risk Assessment Reports (RAR), and Security Assessment Plans (SAP).
· Practical knowledge of implementing and auditing DISA Security Technical Implementation Guides (STIGs) on servers, workstations, and network devices.
· Hands-on experience with tools such as ACAS, eMASS, STIGMan, LanSweeper, SCAP, and SIEM platforms.
· Bachelor’s degree in Cybersecurity, IT, Computer Science, or a related discipline; equivalent professional experience will also be considered.
· At least 3 years in relevant areas such as vulnerability management, RMF Implementation, software certification, SIEM, incident response, and configuration/change management.
· CompTIA Security+
· Active Top Secret clearance required.
