Cyber Vulnerability Management Analyst

General Dynamics Information Technology

2d • Remote

About The Position

Seize your opportunity to make a personal impact as a Cyber Vulnerability Management Analyst to support a federal customer’s enterprise cybersecurity program. The analyst will play a critical role in operating and enhancing the Vulnerability Management (VM) lifecycle by analysing vulnerability scan data, validating findings, prioritizing risk, and coordinating remediation activities across complex enterprise environments. This position requires hands-on experience with enterprise vulnerability scanning tools, strong cyber data analytics skills, and the ability to communicate technical risk clearly to system owners, engineers, and cybersecurity leadership. Candidates must be able to travel to customer location to obtain badging and fingerprinting prior to starting Candidate must have resided in the US in the past 3 of 5 years

Requirements

• 4+ years of cybersecurity experience, with a strong focus on vulnerability management and security operations
• 3+ years Hands-on experience with enterprise vulnerability scanning tools (Tenable, Nessus, Invicti, etc.)
• Strong cyber data analytics skills and experience developing dashboards and reports
• Knowledge of current vulnerability trends, exploits, and threat intelligence
• Experience working in a federal IT or regulated environment
• Ability to manage multiple priorities and work independently with minimal supervision
• Strong collaboration and teamwork skills
• Strong cyber data analytics skills and experience developing dashboards and reports (Excel, Pivot Tables, charts, graphs, Power BI or other tools)
• Must be able to obtain a Public Trust and successfully pass a thorough government background screening process (forms/fingerprinting).

Nice To Haves

• Preference to candidates local to the DMV Area.
• Experience with MS Office suite (Word, Excel, PP, Visio, SharePoint, etc.)
• Experience with NIST, FISMA, and federal cybersecurity policy requirements.
• Experience with any HHS agencies or entities (CMS, HRSA, NIH, etc.)
• Demonstrated strong technical skills and analytic abilities, as well as experience performing system security analysis and risk management.
• Demonstrated experience performing complex technical tasks with minimal direction.
• Possesses experience with communicating potentials risks to stakeholders.
• Possess a broad knowledge of security best practices, policies and guidance.

Responsibilities

• Analyze raw vulnerability scan results and provide clear, actionable findings to system owners and stakeholders
• Validate vulnerabilities, identify false positives, and confirm technical risk and exploitability
• Provide practical remediation guidance aligned with system architecture and operational constraints
• Track vulnerability remediation status and support risk-based prioritization
• Works closely with the risk management and other teams to determine system risks based upon vulnerability results and ensure compensating and/or mitigating controls are in place.
• Operate and support vulnerability scanning tools across multiple platforms, including Tenable Security Center, Tenable.io, Nessus Manager, Nessus Network Monitor, NetSparker/Invicti Enterprise, CodeDX, Coverty, Black Duck, Seeker, and Guardium Database Scanner.
• Has a Solid understanding of networking concepts, including TCP/IP, DNS, DHCP, VPN, and firewalls from a security perspective.
• Develop and adhere to Standard Operating Procedures (SOP).
• Comfortable with interfacing the customer, cross-functional teams and application owners on vulnerability metrics and findings.
• Adhere to Service Level Agreements (SLA) for service request support.
• Mentor and train team members & program successors.
• Participates in special projects, as needed.
• Works with Program and Project management throughout the period of performance.
• Supports technical problems that occur and on-call support for non-business hours.
• Provide Weekly and on-demand Status Reports on work performed.

Benefits

• Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match.
• To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave.
• GDIT typically provides new employees with 15 days of paid leave per calendar year to be used for vacations, personal business, and illness and an additional 10 paid holidays per year.
• Paid leave and paid holidays are prorated based on the employee’s date of hire.
• The GDIT Paid Family Leave program provides a total of up to 160 hours of paid leave in a rolling 12 month period for eligible employees.
• To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available.
• We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed