Vulnerability Assessment Analyst

Booz Allen Hamilton•Alexandria, VA

1d•$86,800 - $198,000•Remote

About The Position

Join a mission-driven team supporting the Army National Guard by delivering reliable, secure, and high-quality cybersecurity services that directly impact readiness and daily operations. You will identify, analyze, and report security vulnerabilities across systems, applications, and networks. You will also perform vulnerability scans and analyze results to identify weaknesses and potential attack vectors. As you assess the severity and impact of vulnerabilities based on risk frameworks and recommend remediation actions, prepare vulnerability reports, track remediation progress, and maintain accurate records of assessments, your work will directly support the Army National Guard’s ability to protect communities and respond to national missions. This opportunity offers meaningful client engagement, technical growth, and the chance to support a high-impact mission in a fast-paced environment where your expertise will make a visible difference every day. Join us. The world can't wait.

Requirements

5+ years of experience in vulnerability management and analysis
Experience working in an environment with SOC operations and cybersecurity engineers
Experience with enterprise vulnerability scanning tools, such as Tenable.sc, Nessus, or ACAS
Experience generating reports to measure progress in meeting vulnerability remediation targets such as POAMs
Knowledge of federal cybersecurity frameworks such as NIST 800-53 controls
Knowledge of CVSS, CVE, NVD, and threat intelligence sources
Ability to evaluate the risk of all identified vulnerabilities and prepare remediation instructions for system administrators
TS/SCI clearance
HS diploma or GED
Information Security Certification such as CEH, CompTIA Security+, CASP+, or CompTIA Security X Certification

Nice To Haves

Experience working in ARNG, DA, or DoD/DoW environments
Possession of excellent verbal and written communication skills
Bachelor's degree
Advanced Information Security Certification such as CISSP, ISSEP, CISM, or CCSP Certification

Responsibilities

Identify, analyze, and report security vulnerabilities across systems, applications, and networks.
Perform vulnerability scans and analyze results to identify weaknesses and potential attack vectors.
Assess the severity and impact of vulnerabilities based on risk frameworks.
Recommend remediation actions.
Prepare vulnerability reports.
Track remediation progress.
Maintain accurate records of assessments.