VM Analyst

ECS Tech Inc•Work from home, Virginia

4h•$100,000 - $115,000•Remote

About The Position

The Vulnerability Management Analyst is responsible for supporting vulnerability and exposure management operations across multiple client environments within an MSP SOC. This role focuses on vulnerability assessment, risk analysis, remediation coordination, client reporting, and operational support across diverse enterprise security monitoring technologies and vulnerability management platforms. This role works closely with the Exposure Management Team, Security Engineering Team, SOC analysts, client technical teams, and internal engineering teams to deliver high-quality vulnerability management services, actionable risk intelligence, and effective remediation support across a multi-client portfolio. This role requires the ability to seamlessly transition between client environments, adapt to varied technology stacks, and communicate complex security risks to both technical and executive audiences.

Requirements

Minimum of 3-5 years of cybersecurity experience supporting vulnerability management or exposure management operations, preferably within an MSP, MSSP, or multi-client SOC environment.
Proven ability to manage security operations across multiple client environments simultaneously, with strong organizational and context-switching capabilities.
Hands-on experience with multiple vulnerability management technologies such as Tenable (Nessus, Tenable.io, Tenable.sc), Crowdstrike Spotlight, or similar platforms.
Strong analytical skills in vulnerability risk assessment, prioritization methodologies, CVSS scoring, exploitability analysis, and business impact evaluation.
Excellent verbal and written communication skills with demonstrated ability to explain technical security risks to diverse audiences including executives, IT teams, and non-technical stakeholders.
Strong understanding of enterprise infrastructure, cloud environments (AWS, Azure, GCP), container technologies, endpoint systems, and network architecture across varied enterprise configurations.
Experience coordinating vulnerability remediation efforts with IT teams, tracking remediation progress, and managing client expectations around timelines and priorities.
Familiarity with cybersecurity frameworks such as NIST Cybersecurity Framework, CIS Critical Security Controls, ISO 27001, and industry-specific compliance requirements.
Able and willing to obtain a US Security Clearance.

Responsibilities

Support vulnerability and exposure management operations across multiple client environments within an MSP SOC.
Conduct vulnerability assessment and risk analysis.
Coordinate remediation efforts with clients and internal teams.
Generate client reports on vulnerability status and risk.
Provide operational support across diverse security monitoring and vulnerability management platforms.
Collaborate with the Exposure Management Team, Security Engineering Team, SOC analysts, client technical teams, and internal engineering teams.
Deliver high-quality vulnerability management services and actionable risk intelligence.
Adapt to varied technology stacks and communicate complex security risks to diverse audiences.
Participate in on-call support for security incident response, operational issues, and investigation activities.