Vulnerability Management Analyst

Abacus Technology Corporation • Lincoln, MA

7d

About The Position

Abacus Technology Corporation is seeking a motivated Vulnerability Management Analyst to join our team. This role involves performing vulnerability scanning, assessment, and remediation tracking using various tools, analyzing scan data, and coordinating patching activities. The analyst will also develop automation scripts, work within Windows environments, manage ticketing systems, and prepare reports for leadership. Collaboration with Cybersecurity, IT Operations, and Compliance teams is essential to support RMF and STIG compliance requirements. The position requires proactive communication with both technical and non-technical stakeholders and support for endpoint management tools.

Requirements

• 2+ years of experience in vulnerability management, patch management, or system administration within a DoD or enterprise environment.
• Associate’s degree in a related field.
• Must be Security+ CE certified.
• Strong understanding of Windows OS (Windows 10/11) and Windows Server environments.
• Experience with vulnerability management tools (e.g., ACAS, Tenable, Nessus, Tanium, Qualys).
• Demonstrated experience with patch management and configuration management processes.
• Knowledge of PowerShell scripting for automation and remediation workflows.
• Knowledge of Active Directory, Group Policy, and system hardening techniques.
• Familiar with enterprise ITSM platforms (ServiceNow preferred).
• Must be a US Citizen and hold a current Secret clearance.
• Excellent written and verbal communication skills, including the ability to convey technical details clearly.
• Proven ability to manage competing priorities in a mission-focused environment.

Nice To Haves

• Experience supporting DoD cybersecurity programs and compliance frameworks (RMF, STIGs, DISA, NIST 800-53) desired.
• Familiarity with automation/orchestration platforms for patch and configuration management preferred.
• Experience creating dashboards and reports for leadership visibility using tools such as Power BI, Tanium, and ServiceNow Performance Analytics preferred.

Responsibilities

• Perform vulnerability scanning, assessment, and remediation tracking using ACAS (Nessus/Security Center), ARAD (Tanium), or similar tools.
• Analyze scan data and coordinate patching activities with system administrators and functional owners.
• Develop and maintain PowerShell scripts to automate configuration management and patch deployment tasks.
• Work in Active Directory and Windows Server environments to implement secure baselines and GPO configurations.
• Coordinate vulnerability closure through ServiceNow or equivalent ticketing systems, ensuring timely and accurate updates.
• Prepare tracking and status reports on vulnerability status, patch compliance, and risk posture for leadership and compliance reviews.
• Collaborate with Cybersecurity, IT Operations, and Compliance teams to support RMF and STIG compliance requirements.
• Proactively communicate findings, remediation guidance, tracking insights, and risk impacts to both technical and non-technical stakeholders.
• Support HBSS/MECM and related endpoint management tools as required to deploy patches or security updates.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Associate degree