Vulnerability Management Administrator

TekSynap•Washington, DC

2d•$36,000 - $53,000•Onsite

About The Position

We are seeking a Vulnerability Management Administrator to join our team supporting a Department of Commerce (DOC) project in Washington, D.C. TekSynap is a fast-growing high-tech company that understands both the pace of technology today and the need to have a comprehensive well planned information management environment. “Technology moving at the speed of thought” embodies these principles – the need to nimbly utilize the best that information technology offers to meet the business needs of our Federal Government customers.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related technical field, or equivalent combination of education and experience.
3+ years of experience in cybersecurity, vulnerability management, systems administration, information security, or a related technical discipline.
DoD 8570/8140-aligned cybersecurity certification, such as Security+, or the ability to obtain the required certification within the designated timeframe, if required by the contract.
Demonstrated experience conducting and analyzing vulnerability scans using tools such as Tenable, Nessus, Qualys, or comparable vulnerability management platforms.
Experience analyzing vulnerabilities using CVEs, CVSS scoring, severity ratings, exploitability, and asset criticality to support risk-based remediation.
Experience coordinating vulnerability remediation activities with system administrators, application owners, network engineers, and cybersecurity personnel.
Experience with security patching, system hardening, configuration management, and vulnerability remediation verification.
Working knowledge of NIST cybersecurity standards and frameworks, including NIST SP 800-53 and the Risk Management Framework (RMF).
Familiarity with Security Technical Implementation Guides (STIGs), security configuration baselines, POA&Ms, and federal cybersecurity compliance requirements.
Ability to analyze technical security findings, identify remediation requirements, and communicate recommended corrective actions to both technical and non-technical stakeholders.
Experience developing vulnerability reports, dashboards, metrics, and management briefings.
Ability to manage multiple vulnerabilities, remediation activities, and competing priorities while meeting established remediation timelines.
Ability to obtain and maintain the required government security clearance or suitability determination, as applicable to the position.

Responsibilities

Conduct vulnerability assessments and scans across servers, workstations, network devices, applications, and other enterprise assets using tools such as Tenable, Nessus, or similar platforms.
Analyze vulnerability scan results and validate findings to identify legitimate security risks and eliminate false positives.
Assess and prioritize vulnerabilities based on CVSS scores, severity, exploitability, asset criticality, and mission impact.
Coordinate with system administrators, application owners, network teams, and other stakeholders to develop and execute vulnerability remediation plans.
Track remediation activities and maintain accurate vulnerability records, remediation status, exceptions, and risk acceptance documentation.
Support the development and maintenance of Plans of Action and Milestones (POA&Ms) for unresolved security vulnerabilities.
Perform follow-up scans and validation testing to confirm that vulnerabilities have been successfully remediated.
Monitor emerging vulnerabilities, CVEs, security advisories, and threat intelligence to identify vulnerabilities that may require expedited remediation.
Support system and application teams in implementing security patches, configuration changes, and system hardening measures.
Assess systems against applicable Security Technical Implementation Guides (STIGs), configuration baselines, and organizational security requirements.
Generate recurring vulnerability management reports, dashboards, metrics, and briefings for technical and management stakeholders.
Maintain vulnerability management documentation, procedures, workflows, and standard operating procedures.
Support FISMA, RMF, NIST, and other applicable cybersecurity compliance and assessment activities.
Assist with security assessments, audits, and authorization activities by providing vulnerability data, remediation evidence, and supporting documentation.
Identify trends and recurring vulnerabilities and recommend improvements to vulnerability management and remediation processes.
Collaborate with cybersecurity, infrastructure, network, cloud, and application teams to reduce organizational vulnerability exposure.
Ensure vulnerability management activities are performed in accordance with established security policies, procedures, service-level agreements, and remediation timelines.