Risk and Vulnerability Analyst II

SOSi • Washington, DC

19h • Onsite

About The Position

SOSi is seeking a Risk and Vulnerability Analyst II to support vulnerability assessment and risk analysis activities in alignment with our customer. This role is responsible for conducting vulnerability scanning and analysis, supporting remediation efforts, maintaining scan operations, and helping improve enterprise visibility into security weaknesses and cyber risk.

Requirements

• Three (3) to five (5) years of security-related experience
• Experience with operating system, database, and web application vulnerability scanning
• Experience supporting cloud compliance scanning
• Experience troubleshooting vulnerability scan tools and scan configurations
• Experience with automation supporting vulnerability assessment operations
• Experience supporting Information System Vulnerability Management (ISVM) scans and compliance activities
• Experience with API discovery and security scanning
• Bachelor’s Degree
• Secret (eligible) clearance

Responsibilities

• Perform vulnerability assessments and security scanning across operating systems, databases, web applications, and enterprise infrastructure
• Analyze vulnerabilities and support development of remediation recommendations
• Support cloud compliance scans and assessment activities
• Troubleshoot scan issues and support maintenance of vulnerability scanning tools, consoles, and configurations
• Support automated and scheduled scanning activities, including scan planning, execution, and reporting
• Support ad hoc or emergency vulnerability scanning in support of incident investigation and response activities
• Create and maintain scan reports, data feeds, scan policies, repositories, and user access/roles for assessment tools
• Support API discovery and scanning, and integration of assessment data into third-party tools
• Coordinate with cyber defense engineering and system teams to support tool operations, testing, and vulnerability management activities

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level