Vulnerability Management Analyst

Remotedxb; Dubai; On-site; AED 240,000 - 360,000; Full time

Benefits offered by this job

Comprehensive medical, dental, and视s

Flexible Spending Account and HealthS

Retirement 401(k) with employer match

Open leave policy and paid holidays

Tuition reimbursement and employeeass

Job summary

Copper River Family of Companies is seeking a vulnerability management professional to assess and prioritize threats across NIH information systems. You will work with technical teams to drive remediation and track POA&Ms.

The role emphasizes experience in federal cybersecurity, NIST RMF, and the ability to obtain NIH Public Trust, with strong reporting and dashboard development for leadership.

Qualifications

• Bachelor’s degree in cybersecurity, computer science, IT, or engineering.
• Minimum 5 years in cybersecurity or vulnerability management in Federal environments.
• Experience with POA&Ms development and remediation tracking.
• Familiarity with NIST RMF (SP 800-37), NIST SP 800-53 Rev. 5, and FISMA.
• Ability to obtain and maintain NIH Public Trust.

Responsibilities

• Perform vulnerability assessments and analysis across NIH information systems and infrastructure.
• Prioritize threats using exploitability, threat intelligence, and CISA KEV.
• Develop vulnerability dashboards, remediation metrics, and executive reporting.
• Review and analyze vulnerability scan results from enterprise security tools.
• Coordinate with technical teams to assess remediation requirements and timelines.
• Manage the full lifecycle of vulnerability identification, remediation, and closure.
• Support continuous monitoring and RMF/A&A activities.
• Assist with the management and tracking of POA&Ms.

Education

Bachelor's degree in Cybersecurity, Computer Science, IT, or Engineering

Job description

Responsibilities

• Perform vulnerability assessments and analysis across NIH information systems and infrastructure
• Prioritize threats using exploitability, threat intelligence, and CISA KEV
• Develop vulnerability dashboards, remediation metrics, and executive reporting
• Review and analyze vulnerability scan results from enterprise security tools
• Coordinate with technical teams to assess remediation requirements and timelines
• Manage the full lifecycle of vulnerability identification, remediation, and closure
• Support continuous monitoring and RMF/A&A activities
• Assist with the management and tracking of Plans of Action and Milestones (POA&Ms)

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, IT, or Engineering
• Minimum 5 years of experience in cybersecurity or vulnerability management in Federal environments
• Experience with POA&Ms development and remediation tracking
• Familiarity with NIST RMF (SP 800-37), NIST SP 800-53 Rev. 5, and FISMA
• Ability to obtain and maintain an NIH Public Trust

Preferred Qualifications

• Certifications such as Security+, CEH, CISSP, GVA, GISF, GSEC, CAP, CISM, or CRISC
• Experience supporting NIH, HHS, or other Federal civilian agencies
• Knowledge of cloud security, FedRAMP, and Zero Trust principles
• Experience with continuous diagnostics and mitigation (CDM) initiatives

Benefits

• Comprehensive medical, dental, and vision coverage
• Flexible Spending Account and Health Savings Account options
• Retirement 401(k) with employer match
• Open leave policy and paid holidays
• Tuition reimbursement and employee assistance program

About the Company

Owned by the Native Village of Eyak (NVE), the Copper River Family of Companies delivers solutions to support the diverse missions of our clients. We are a proud participant in the SBA 8(a) Business Development Program, working to facilitate economic advancement for the Tribe.