Vulnerability Management Technician

JT4•Las Vegas, NV

6d•$79,040 - $85,280•Hybrid

About The Position

The Vulnerability Management Technician provides technical support to end users while supporting the organization’s cybersecurity and vulnerability management program. This role is responsible for resolving hardware, software, network, and user account issues while assisting with vulnerability identification, assessment, remediation, reporting, and compliance activities. The ideal candidate possesses strong customer service skills, technical troubleshooting abilities, and a foundational understanding of cybersecurity principles and risk management.

Requirements

An associate's degree in engineering or formal academic/vocational training, or military equivalent and four or more years of technical/professional experience in the specialty field are required for this position.
Associate degree in IT, Cybersecurity, Computer Science, or related field (or equivalent experience)
Minimum of four (4) years of enterprise IT support experience
Must possess an Information Assurance Technical (IAT) Level II certification (CompTIA Security+ or equivalent) in accordance with DoD 8570 requirements
Working knowledge of Microsoft Windows and Microsoft 365 environments
Familiarity with Active Directory, user account management, and access control
Understanding of networking fundamentals (TCP/IP, DNS, DHCP, VPN)
Basic understanding of cybersecurity and vulnerability management principles
Experience with vulnerability management tools and scripting for automation
Strong troubleshooting, analytical, and communication skills
Ability to manage multiple priorities independently
Must be a U.S. citizen and possess a valid state-issued driver’s license
Must qualify for and maintain a government security clearance

Nice To Haves

Prior military experience in Cyber Defense Operations AFSC (1D7X1 or DoW cybersecurity support experience highly desirable
Experience with vulnerability scanning tools such as Tenable, Nessus, Qualys, or Rapid7
Knowledge of cybersecurity frameworks such as NIST RMF, NIST CSF, or CIS Controls
Experience supporting enterprise, government, or defense environments
Familiarity with endpoint and patch management systems
Experience with encryption devices and cryptographic systems
Experience implementing DISA STIG compliance across enterprise environments
Familiarity with SCAP tools and compliance reporting
Strong customer service and professional communication skills
Ability to clearly explain technical issues to non-technical users
Strong analytical, organizational, and problem-solving abilities
High attention to detail and documentation accuracy
Ability to work independently and within a team environment
Ability to adapt to evolving cybersecurity tools and mission requirements

Responsibilities

Provide Tier I and Tier II technical support for desktops, laptops, and peripheral devices
Diagnose and resolve hardware, software, operating system, network connectivity, and application issues
Respond to, manage, and track service requests through the organization's ticketing system
Install, configure, maintain, and troubleshoot workstation hardware and software
Create, modify, and disable user accounts in accordance with organizational policies, including management of user roles and access permissions across enterprise systems
Support Microsoft Windows operating systems and Microsoft 365 applications
Assist users with password resets, access requests, and software installation support
Maintain inventory and accountability of assigned IT assets and equipment
Demonstrate a strong understanding of Windows operating systems, networking concepts, and web-based applications in troubleshooting activities
Conduct and support routine vulnerability scans using approved cybersecurity tools
Utilize vulnerability management tools and assist with scripting and automation to improve analysis, reporting, and remediation workflows
Analyze vulnerability scan results and prioritize remediation based on severity and risk
Coordinate remediation activities with system administrators, network administrators, and system owners
Monitor patch compliance and support vulnerability mitigation activities
Validate that patches and fixes have been successfully implemented through verification and rescanning
Track vulnerability metrics and maintain remediation status reports
Assist with implementation of cybersecurity controls and security best practices
Support compliance efforts related to organizational, customer, and regulatory cybersecurity requirements
Assist in cybersecurity audits, inspections, and assessments
Document vulnerability findings, remediation actions, and technical troubleshooting details
Create remediation reports and maintain cybersecurity compliance documentation
Maintain an active event log reflecting the current security state of systems and environments
Ensure accurate and timely reporting of vulnerability status and remediation progress
Escalate complex technical or security issues to appropriate support or cybersecurity teams
Apply strong analytical, organizational, and problem-solving skills to identify root causes and implement corrective actions
Participate in incident response and cybersecurity investigations as required
Support cybersecurity awareness and end-user training initiatives
Maintain compliance with all cybersecurity, information assurance, and operational security requirements
Participate in after-hours support and maintenance activities when required
Support administration, configuration, troubleshooting, and accountability of DoW encryption devices and associated cryptographic equipment
Enforce approved security configurations and ensure systems remain compliant with Security Technical Implementation Guides (STIGs), cybersecurity policies, and security baselines.
Assist with implementation, validation, and remediation of STIG findings from audits, inspections, and vulnerability assessments
Perform other job-related duties, as required