Vulnerability Management Analyst (OS/Infrastructure)

Unity Technologies Corporation•Columbus, OH

2d•Onsite

About The Position

UnityTec is seeking a Vulnerability Management Analyst (OS/Infrastructure) to join their team. The analyst will be responsible for proactively discovering, assessing, and remediating security risks across enterprise networks, operating systems, and applications. This role involves collaborating with mission partners to prioritize remediation efforts and ensuring strict adherence to DoD, Defense Logistics Agency (DLA), and DISA security compliance programs. The position is located in Columbus, OH, and may require CONUS and OCONUS travel.

Requirements

A minimum of five (5) years of relevant experience
DoD Approved 8570 Baseline Certification: Category IAM Level II
Hands-on experience working with vulnerability scanners
Understanding of vulnerabilities and remediation techniques
Must be a U.S. citizen
Must possess a current Top-Secret clearance.

Responsibilities

Conducting targeted manual reviews and utilizing automated vulnerability scanners to identify systemic weaknesses.
Analyzing discovered vulnerabilities and accurately characterizing the operational risk to networks, operating systems, applications, databases, and other core information system components.
Engaging proactively with stakeholders and mission partners to facilitate seamless vulnerability discovery.
Facilitating and coordinating comprehensive remediation efforts across multiple teams and system owners.
Prioritizing mitigation activities strictly based on characterized risk levels and potential impact.
Recommending appropriate, actionable technical measures to remediate identified vulnerabilities and mitigate overarching systemic risks.
Tracking ongoing system security postures and logging compliance issues throughout their lifecycle.
Generating comprehensive reports regarding security status and remediation progress for mission partners.
Validating that applied remedial actions are effective and successfully resolve the targeted vulnerabilities.
Ensuring the implementation of mandated security settings, specifically those required by Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIG).
Supporting and enforcing compliance with the overarching DoD Information Assurance Vulnerability Management (IAVM) program.
Validating that all systems and remediation activities adhere strictly to DLA and broader DoD information security policies.