Vulnerability Management Analyst

United States·Arlingtonmid

CybersecurityVulnerability Management Analyst

1 views0 saves0 applied

Apply Now

Quick Summary

Key Responsibilities

The Vulnerability Management Analyst will support activities including: Conduct and support vulnerability detection, assessment, analysis, and remediation using DoD-, Air Force-,

Requirements Summary

Education/Years’ Experience/Certifications: Option 1 – Standard Qualification Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Information Systems, Engineering,

Technical Tools

CybersecurityVulnerability Management Analyst

Absolute Business Solutions Corp (ABSC) is not just another tech company. We’re a community of innovators, engineers, analysts and business professionals working together with our customers to tackle the most complex national security challenges. For more than 20 years we’ve supported critical Department of Defense (DoD), Intelligence Community (IC), Federal Civilian missions and global, multi-national corporations. We specialize in supporting our clients in the Intelligence, Technology, Defense, AI/ML, and Data Science fields. As we continue to grow at a rapid pace, we need some amazing new professionals to join our team.

ABSC is seeking a Vulnerability Management Analyst to join our team supporting the Air Force National Capital Region (AFNCR) Information Technology Services (ITS2) program, delivering secure, resilient technology supporting Air Force operations across the National Capital Region, including the Pentagon, Joint Base Andrews, and Joint Base Anacostia-Bolling. Spanning cybersecurity, engineering, enterprise operations, infrastructure modernization, logistics, and 24/7 mission support, AFNCR ITS2 also supports the National Military Command Center (NMCC), Joint Staff, and other mission partners—giving technical professionals the opportunity to solve complex challenges while helping keep critical national-defense capabilities connected, protected, and operational.

As a Vulnerability Management Analyst, you will help strengthen the cybersecurity posture of the AFDW environment through vulnerability detection, assessment, analysis, remediation, and compliance activities across Air Force networks and systems. You will work closely with ISSOs, ISSMs, cybersecurity teams, engineers, system and network administrators, program offices, and mission owners to identify risk, drive remediation, support compliance, and help keep critical Air Force systems secure, resilient, and mission ready.

The majority of work is conducted on-site at our client location in the National Capital Region – primarily Pentagon, Joint Base Andrews and/or Joint Base Anacostia-Bolling (JBAB), based on each assignment. We offer a flexible schedule and, occasionally, some tasks may be performed remotely with prior client approval.

Responsibilities

~2 min read

The Vulnerability Management Analyst will support activities including:

→Conduct and support vulnerability detection, assessment, analysis, and remediation using DoD-, Air Force-, and AFDW-approved systems and tools.
→Maintain and support Assured Compliance Assessment Solution (ACAS) capabilities and ensure vulnerability scans are properly configured and executed.
→Prepare and provide recurring vulnerability scan results, cybersecurity reports, and vulnerability trend analysis.
→Analyze scan data and security logs to identify vulnerabilities, anomalies, policy violations, unauthorized activity, and potential cybersecurity incidents.
→Configure vulnerability assessment tools in accordance with NIST, DoD, Air Force, and DISA cybersecurity guidance.
→Review and track vulnerability reports, IAVMs, TCNOs, TASKORDs, and other DoD/USAF cybersecurity directives.
→Support remediation of identified vulnerabilities, including Critical and Zero-Day vulnerabilities, within required compliance timelines.
→Review and validate Security Technical Implementation Guide (STIG) checklists and recommend appropriate remediation actions.
→Develop, coordinate, track, and manage Plans of Action and Milestones (POA&Ms) through closure.
→Review and track Risk Management Framework (RMF)-related POA&Ms and security controls.
→Support periodic reviews and testing of RMF security controls.
→Configure, manage, operate, and maintain approved automated vulnerability management and endpoint security capabilities, including Microsoft Endpoint Configuration Manager (MECM) or equivalent tools.
→Coordinate vulnerability remediation activities with cybersecurity offices, engineering teams, system/network administrators, PMOs, customers, mission owners, and external Air Force/DoD organizations.
→Provide weekly vulnerability remediation status reporting, including open/closed IAVMs, STIG findings, RMF POA&Ms, and other compliance metrics.
→Recommend technical and procedural solutions to improve the security posture of network, platform, and system environments.
→Support the development and maintenance of cybersecurity policies, procedures, and standard operating procedures.

Requirements

~1 min read

Education/Years’ Experience/Certifications:
- Option 1 – Standard Qualification
  - Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Information Systems, Engineering, or a related technical discipline.
  - Current CompTIA Security+ CE or equivalent DoD 8570/8140 IAT Level II certification.
- Option 2 – Master's Degree Substitution
  - Master’s degree in a relevant technical discipline.
  - Ability to obtain Security+ CE or equivalent IAT Level II certification within six months of assignment.
- Option 3 – Experience Substitution
  - No degree required with a minimum of 5 years of intensive, progressive relevant experience demonstrating the technical proficiency required for the position.
  - Security+ CE or equivalent DoD 8570/8140 IAT Level II certification in accordance with contract requirements.
Skills:
- Must be able to work effectively in a highly regulated DoD environment.
- Must possess strong analytical, troubleshooting, documentation, and communication skills.
- Must be able to coordinate across technical teams, cybersecurity organizations, customers, and mission stakeholders.
- Must maintain all certifications required for the assigned labor category before performing work.
- Personnel with elevated privileges on Air Force networks must maintain applicable DoD cybersecurity workforce certifications.
- Must be able to read, write, speak, and understand English.
- On-call or after-hours support may be required based on mission