Cyber Risk & Vulnerability Analyst I

ASM Research, An Accenture Federal Services Company; Denver (CO); On-site; USD 66,900 - 87,000; Full time

Job summary

ASM Research, an Accenture Federal Services company, is seeking an entry- to mid-level Risk and Vulnerability Threat Analyst I to evaluate networks, systems, and applications, identify vulnerabilities, and assess risks to mission-critical operations in a highly regulated government environment.

You will use scanning tools (Nessus, Qualys, OpenVAS), perform basic threat modeling, assist in remediation planning, and document findings for technical and non-technical stakeholders, aligning with

Qualifications

• Bachelor’s Degree in Computer Science or a related field, or equivalent relevant experience.
• Typically 2–4 years of hands-on experience in cybersecurity, information security, or IT systems administration, including exposure to vulnerability assessment and risk analysis activities.
• Demonstrated experience using vulnerability scanning tools and interpreting results to support remediation in an enterprise environment.
• Ability to communicate technical findings, risk implications, and remediation recommendations clearly to both technical and non‑technical audiences in a structured, documentation‑driven environment.
• Ability to obtain and maintain any required background investigation associated with supporting highly regulated government environments.
• U.S. Citizenship.

Responsibilities

• Conduct vulnerability scans of servers, endpoints, cloud workloads, and network devices using common assessment platforms (such as Nessus, Qualys, or OpenVAS) and interpret results to identify exploitable weaknesses.
• Review system and network configurations, access controls, and patch levels against security baselines and policies, documenting deviations and articulating risk impact and likelihood in clear, actionable language.
• Apply foundational risk analysis and threat modeling concepts to prioritize remediation activities based on asset criticality, exploitability, and current threat intelligence for mission‑critical systems.
• Support formal risk and vulnerability assessments and audits by gathering technical evidence, validating findings, and contributing to structured reports and remediation recommendations suitable for highly regulated government environments.
• Collaborate with security operations and infrastructure teams to track remediation tasks, verify closure of findings, and refine vulnerability management processes, SLAs, and metrics over time.
• Utilize basic scripting or automation (for example, Python or PowerShell) to normalize, correlate, and summarize vulnerability data from multiple tools and repositories for dashboards and executive reporting.
• Maintain awareness of emerging vulnerabilities, common exploitation techniques, and security best practices in order to advise on control improvements and defense‑in‑depth strategies.

Skills

Communication skills

Risk analysis

Threat modeling

Scripting (Python/PowerShell)

Vulnerability assessment

Education

Bachelor's Degree in Computer Science or related field

Equivalent relevant experience

Tools

Nessus

Qualys

OpenVAS

Job description

ASM Research, an Accenture Federal Services company, is seeking an entry- to mid-level Risk and Vulnerability Threat Analyst I to evaluate networks, systems, and applications, identify vulnerabilities, and assess risks to mission-critical operations in a highly regulated government environment.

You will use scanning tools (Nessus, Qualys, OpenVAS), perform basic threat modeling, assist in remediation planning, and document findings for technical and non-technical stakeholders, aligning with