Vulnerability Assessment Analyst

Seneca Holdings•Mechanicsburg, PA

5d•Hybrid

About The Position

Seneca Technologies is hiring a Vulnerability Assessment Analyst to support a Department of War agency contractor environment cybersecurity operations mission. The analyst identifies, assesses, and tracks security vulnerabilities across on-premises and cloud-based environments by conducting vulnerability scans, analyzing findings, recommending remediation actions, and supporting risk-based decision-making. The position works with system owners, cybersecurity teams, and other stakeholders to improve security through continuous assessment, reporting, and remediation tracking. The position is located in Mechanicsburg, Pennsylvania. Remote work may be authorized, but remote employees must reside within commuting distance of an approved SIPRNet access location and be available to support classified work as needed. Some travel within the continental United States is required. An active Secret clearance is required.

Requirements

Demonstrated experience performing vulnerability assessments, security scanning, and cybersecurity analysis.
Experience analyzing security findings and recommending risk-based remediation actions.
Working knowledge of Department of War cybersecurity requirements and vulnerability management processes.
Understanding of the Risk Management Framework, security authorization, and continuous monitoring principles.
Experience supporting remediation tracking and compliance reporting.
Strong analytical, problem-solving, and communication skills.
Ability to work independently and collaboratively in a mission-focused cybersecurity environment.
U.S. citizenship and ability to obtain and maintain required government security clearances, as applicable.
Current Secret clearance.
Either a bachelor's degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, or a related field and at least five years of relevant experience, or at least nine years of directly relevant cybersecurity, vulnerability assessment, or system security experience in lieu of a degree.
One or more of the following certifications: CompTIA Security+ CE, CompTIA CySA+, Certified Ethical Hacker (CEH), Tenable Certification, or a comparable vulnerability assessment or cybersecurity certification.

Responsibilities

Conduct vulnerability scans and security assessments of information systems, applications, networks, and cloud environments.
Analyze assessment results and determine potential impacts to systems and mission operations.
Develop and recommend remediation strategies for vulnerabilities and security weaknesses.
Track remediation efforts and coordinate with system owners to ensure timely resolution.
Support continuous monitoring through recurring assessments and validation of corrective actions.
Prioritize vulnerabilities based on severity, exploitability, and mission impact.
Generate vulnerability management reports, metrics, dashboards, and status updates.
Validate remediation through rescanning and follow-up assessments.
Provide vulnerability assessment data and support authorization decisions for Risk Management Framework activities.
Collaborate with cybersecurity, engineering, cloud, and operations teams to improve system security and compliance.
Assist with cybersecurity inspections, audits, compliance reviews, and security assessments.
Maintain assessment documentation and support reporting requirements for leadership and stakeholders.