DoD-Cleared Vulnerability Analyst

Sarela Technology Solutions; Columbus (OH); On-site; USD 90,000 - 110,000; Full time

Benefits offered by this job

401(k)

401(k) matching

Dental insurance

Health insurance

Paid time off

Profit sharing

Training & development

Tuition assistance

Vision insurance

Job summary

SarelaTech in Columbus, Ohio, seeks an experienced Vulnerability Management Analyst (OS/Infrastructure) to support a DoW cybersecurity mission. You will identify vulnerabilities across OS, infrastructure, apps, and databases and coordinate remediation with stakeholders.

The role requires DoD 8570/8140 IAT Level II certification and an active DoD Secret clearance, with focus on DISA STIGs and IAVM processes to ensure compliance.

Qualifications

• Five years of relevant experience.
• Hands-on experience with vulnerability scanners.
• Understanding of cybersecurity vulnerabilities and remediation techniques.
• Experience analyzing vulnerabilities and risk across OS, networks, apps, databases, or other components.
• Familiarity with DISA STIGs.
• Familiarity with DoD vulnerability management and IAVM processes.

Responsibilities

• Identify vulnerabilities and assess risk across operating systems, infrastructure, applications, databases, and other information system components.
• Coordinate remediation activities and prioritize remediation efforts based on risk.
• Recommend actions to remediate vulnerabilities and mitigate risk, and validate remediation.
• Support implementation of DISA STIGs and DoD IAVM program.
• Track and report security and compliance issues and coordinate with system admins and stakeholders.

Skills

Vulnerability scanning

Risk assessment

DISA STIGs

DoD IAVM processes

DoD 8570/8140 IAT requirements

Tools

ACAS

Job description

SarelaTech in Columbus, Ohio, seeks an experienced Vulnerability Management Analyst (OS/Infrastructure) to support a DoW cybersecurity mission. You will identify vulnerabilities across OS, infrastructure, apps, and databases and coordinate remediation with stakeholders.

The role requires DoD 8570/8140 IAT Level II certification and an active DoD Secret clearance, with focus on DISA STIGs and IAVM processes to ensure compliance.