Infrastructure Vulnerability Management Analyst

Alphalogic, Inc.; Washington (District of Columbia); On-site; USD 80,000 - 100,000; Full time

Job summary

Alphalogic, Inc. is seeking an Infrastructure Vulnerability Management Analyst in Washington, DC. The role involves reviewing vulnerability scans, managing security profiles, and performing security analysis using tools like IBM AppScan and Guardium Database Scanner.

Ideal candidates will have expertise in vulnerability management, proficiency in scripting, and experience in risk evaluation. U.S. citizenship or Green Card holders are encouraged to apply.

Qualifications

• Experience with vulnerability management tools is required.
• Proficiency in scripting languages is essential.
• Strong analytical skills for security assessment.

Responsibilities

• Review scanner results for vulnerabilities.
• Manage security scan profiles to align with standards.
• Perform security analysis using automated tools.
• Document findings and ensure remediation follow through.
• Evaluate and mitigate security risks.

Skills

Experience with Qualys (or Nessus or Nexpose)

Scripting knowledge in Shell, Perl, or Python

Penetration testing experience

Tools

IBM AppScan

Guardium Database Scanner

Job description

Infrastructure Vulnerability Management Analyst

Contract

Alphalogic is a global technology solutions company headquartered in the Washington, DC metropolitan area. Alphalogic offers a wide range of technology and consulting services including predictive analytics, data warehousing & business intelligence, cloud consulting, web and mobile application development.

Our core competencies include cloud and mobile computing, healthcare solutions and services, data warehousing‑analytics‑BI, and enterprise collaboration‑content management. Alphalogic teams are continually deploying emerging technologies to meet clients’ current challenges.

Alphalogic specializes in the effective use of industry‑standard frameworks such as Agile, to help clients achieve quick wins and reduce cycle times.

Roles and Responsibilities

• Review scanner results and perform vulnerability prioritization based on risk‑based analysis for remediation.
• Manage, modify, and adjust security scan profiles to match the company’s baseline standards.
• Analyze false positives and review scanner reports, working with remediation teams following a risk‑based approach.
• Discuss vulnerabilities and recommend monitoring of remediation activities.
• Evaluate and mitigate risks.
• Maintain detailed documentation of test procedures and findings in the vulnerability management system.
• Perform security analysis of application and database layers by manual testing and automated scans using tools such as IBM AppScan and Guardium Database Scanner.
• Demonstrate strong communication skills, both written and verbal, and the ability to explain complex technical issues in simple terms.
• Uphold high ethical standards.

Qualifications

• Experience with Qualys (or Nessus or Nexpose).
• Scripting knowledge in Shell, Perl, or Python.
• Penetration testing experience is a plus.

All information will be kept confidential according to EEO guidelines.

Due to the nature of this contract, candidates with U.S. citizenship or Green Card holders are encouraged to apply.