NIH - Vulnerability Analyst

cFocus Software Incorporated • Bethesda, MD

2d • Remote

About The Position

cFocus Software seeks a Vulnerability Analyst to join our program supporting the National Institutes of Health (NIH). This position is fully remote. This position requires a Public Trust or the ability to obtain a public trust clearance.

Requirements

• Public Trust Clearance
• B.S. Computer Science, Information Technology, or a related field
• 7+ years with vulnerability assessments or vulnerability management programs.
• Experience managing enterprise vulnerability scanning solutions.
• Experience with penetration testing efforts.
• Experience supporting Federal cybersecurity programs.
• Experience with RMF, FISMA, and NIST guidance.
• Experience developing executive cybersecurity reports.
• Ability to obtain and maintain NIH suitability/background investigation.

Responsibilities

• Direct vulnerability scanning activities across NIH enterprise systems.
• Develop enterprise vulnerability management strategies.
• Establish vulnerability assessment priorities based upon risk.
• Continuously improve enterprise vulnerability management capabilities.
• Analyze enterprise vulnerability scan results.
• Perform vulnerability prioritization using risk-based methodologies.
• Identify critical vulnerabilities requiring immediate remediation.
• Evaluate exploitability and business impact.
• Conduct root cause analysis.
• Validate corrective actions.
• Track vulnerability trends and recurring issues.
• Coordinating remediation efforts with System Owners.
• Tracking remediation progress.
• Monitoring SLA compliance.
• Escalating critical vulnerabilities within required timeframes.
• Validating remediation completion.
• Supporting risk acceptance processes.
• Reducing enterprise cybersecurity risk.
• Monitoring aging vulnerabilities.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior