Vulnerability Assessment Analyst

Booz Allen Hamilton•Alexandria, VA

1d•$112,800 - $257,000•Remote

About The Position

Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to government agencies. In all of this “cyber noise,” how can these organizations understand their risks and how to mitigate them? The answer is you, a lead information security risk specialist who can break down complex threats into manageable plans of action. As an information security risk specialist on our team, you’ll advise the Army National Guard leader, leading the discovery of their cyber risks, understanding applicable policies, and developing a mitigation plan. You’ll oversee the analysis and reporting of security vulnerabilities across systems, applications, and networks. You'll also perform vulnerability scans and analyze results to identify weaknesses and potential attack vectors and assess the severity and impact of vulnerabilities based on risk frameworks and recommend remediation actions. Then, you’ll guide your client through a plan of action with presentations, white papers, and milestones. This opportunity offers meaningful client engagement, technical growth, and the chance to support a high‑impact mission in a fast‑paced environment where your expertise will make a visible difference every day. Work with us as we protect the Army National Guard enterprise network.

Requirements

8+ years of experience in vulnerability management and analysis
Experience working in an environment with SOC operations and cybersecurity engineers
Experience with enterprise vulnerability scanning tools, such as Tenable.sc, Nessus, or ACAS
Experience generating reports to measure progress in meeting vulnerability remediation targets such as POAMs
Knowledge of federal cybersecurity frameworks such as NIST 800-53 controls
Knowledge of CVSS, CVE, NVD, and threat intelligence sources
Ability to evaluate the risk of all identified vulnerabilities and prepare remediation instructions for system administrators
TS/SCI clearance
Bachelor's degree
Information Security Certification such as CEH, CompTIA Security+, CASP+, or CompTIA Security X Certification

Nice To Haves

Experience working in ARNG, DA, or DoD/DoW, environments.
Possession of excellent verbal and written communication skills
Master's degree
Advanced Information Security Certification such as CISSP, ISSEP, CISM, or CCSP Certification

Responsibilities

Oversee the analysis and reporting of security vulnerabilities across systems, applications, and networks.
Perform vulnerability scans and analyze results to identify weaknesses and potential attack vectors.
Assess the severity and impact of vulnerabilities based on risk frameworks and recommend remediation actions.
Guide your client through a plan of action with presentations, white papers, and milestones.