Hybrid Vulnerability & Risk Management Analyst

Zohorecruit; Richmond (VA); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Zohorecruit currently seeks a Vulnerability Management Analyst to support risk and vulnerability activities in a hybrid environment based in Richmond, VA. The role focuses on scanning, remediation support, and improving enterprise visibility into cyber risks.

Responsibilities include conducting assessments across OS, databases, and applications, enabling remediation, and coordinating with security operations to maintain tooling and reporting.

Qualifications

• Information Security-related experience.
• Software Vulnerability Management related experience.
• Experience troubleshooting vulnerability scan tools and configurations.
• Experience with automation supporting vulnerability assessment operations.
• Experience supporting ISVM scans and compliance activities.
• Experience with API discovery and security scanning.
• Experience with Microsoft, SharePoint and Power BI.
• Proven analytical and problem-solving abilities.
• Excellent verbal and written communication skills.
• Ability to work independently with minimal direction and as a team.

Responsibilities

• Perform vulnerability assessments and assist security scanning across operating systems, databases, web applications, and enterprise infrastructure.
• Analyze vulnerabilities and support development of remediation recommendations.
• Support cloud compliance scans and assessment activities.
• Help troubleshoot scanning issues and support maintenance of vulnerability scanning tools, consoles, and configurations.
• Support automated and scheduled scanning activities, including scan planning, execution, and reporting.
• Support ad hoc or emergency vulnerability scanning in support of incident investigation and response activities.
• Create and maintain scan reports, data feeds, scan policies, repositories, and user access/roles for assessment tools.
• Support API discovery and scanning, and integration of assessment data into third-party tools.
• Coordinate with SCC Security Operations team to support tool operations, testing, and vulnerability management activities.

Skills

Info Security

Vulnerability Mgmt

Automation

ISVM scans

API discovery

Power BI

SharePoint

Microsoft Cloud

Analytical skills

Communication skills

Independent / Teamwork

Troubleshooting tools

Tools

Vulnerability scanning tools

Job description

Zohorecruit currently seeks a Vulnerability Management Analyst to support risk and vulnerability activities in a hybrid environment based in Richmond, VA. The role focuses on scanning, remediation support, and improving enterprise visibility into cyber risks.

Responsibilities include conducting assessments across OS, databases, and applications, enabling remediation, and coordinating with security operations to maintain tooling and reporting.