NS-ECCOS_Cyber Security Analyst II VM Senior

NetSEA Technologies; Colorado Springs (CO); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Dental

Vision

Short/Long-term disability

401(k) with Safe Harbor matching

Paid time off

Holiday pay

Job summary

NetSEA Technologies is seeking a Cyber Security Analyst II VM Senior to lead enterprise vulnerability management for the ECCOS program. The role oversees the full lifecycle from scan review through remediation tracking and government reporting, supervising two junior analysts.

This on-site position requires active TS/SCI eligibility and experience in DoD/federal environments. The candidate will coordinate with space system owners and maintain dashboards for leadership review.

Qualifications

• Bachelor's degree or equivalent experience in a related field.
• 10+ years of cybersecurity experience with vulnerability management focus.
• Active DoD 8140-aligned certification (e.g., CISSP, GCIH, CASP+) and TS/SCI eligibility.

Responsibilities

• Lead vulnerability management lifecycle activities: scan review and remediation tracking.
• Prioritize remediation using risk-based approach aligned to KEV guidance and severity.
• Produce monthly vulnerability reports and scorecards for Government review.
• Supervise two Vulnerability Management Analysts.
• Coordinate with system owners on remediation timelines and risk acceptance.

Skills

Vulnerability management

Risk analysis

Leadership

Data visualization

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or related field

Tools

ACAS/Nessus

Power BI

Job description

NS-ECCOS_Cyber Security Analyst II VM Senior

• Full-Time
• NS-ECCOS_Cyber Security Analyst II VM Senior

Cyber Security Analyst II Vulnerability Management (Senior)

CONTINGENT UPON CONTRACT AWARD

NetSEA is currently pursuing this contract and is building its candidate pipeline in advance of an anticipated award decision. This position will be offered contingent upon NetSEA's award of the ECCOS task order. Candidates identified now may also be considered for other current or upcoming NetSEA cleared opportunities.

Program

ECCOS – Mission Delta 6 Enterprise Cybersecurity & Cyberspace Operations Support

Openings

1

Clearance Required

Top Secret with SCI eligibility (active, or in-process with ability to obtain by contract performance start)

Reports To

Cyber Security Engineer II (Senior)

Position Summary

The Cyber Security Analyst II VM (Senior) leads NetSEA's Enterprise Vulnerability Management function for the ECCOS program, owning the full vulnerability lifecycle from scan review through remediation tracking and Government reporting. This role supervises two Journeyman-level Vulnerability Management Analysts and sets the risk-based prioritization approach the team follows.

Essential Duties and Responsibilities

• Lead vulnerability management lifecycle activities: scan review, trend analysis, and POA&M creation and tracking
• Prioritize remediation using a risk-based approach aligned to CISA Known Exploited Vulnerabilities (KEV) guidance and severity scoring
• Produce the Monthly Subscriber Enterprise Vulnerability Management Report and Scorecard Metrics for Government review
• Supervise and mentor two Journeyman-level Vulnerability Management Analysts
• Coordinate with space system owners on remediation timelines and risk acceptance decisions
• Maintain vulnerability management data architecture and reporting dashboards for leadership visibility
• Support ACAS/Nessus-based scanning and assessment activities across the enterprise
• Coordinate with the Cyber Security Engineer II on cross-functional alignment and compliance items

Required Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent experience
• 10+ years of relevant cybersecurity experience with a focus on vulnerability management, including experience in DoD or federal environments
• Active DoD 8140-aligned certification appropriate to a CSSP Analyst/Infrastructure Support work role (e.g., CISSP, GCIH, CASP+, or equivalent)
• Active Top Secret clearance with SCI eligibility, or an active Secret clearance with a submitted SSBI/Tier 5 investigation and the ability to reach TS/SCI eligibility within approximately 90 days
• Demonstrated experience with vulnerability scanning tools (ACAS/Nessus or equivalent) and POA&M lifecycle management

Preferred Qualifications

• Prior supervisory or team-lead experience in a vulnerability management or CSSP function
• Experience building or maintaining vulnerability reporting dashboards (Power BI or similar)
• Prior experience supporting U.S. Space Force or other space mission enterprise programs
• Familiarity with CISA KEV-based remediation prioritization frameworks

Knowledge, Skills & Abilities

• Strong analytical skills for vulnerability trend analysis and risk prioritization
• Ability to lead and develop junior analysts
• Strong data visualization and reporting skills
• Ability to communicate risk clearly to both technical and non-technical stakeholders

Work Environment and Physical Demands

• On-site position at a Government facility in the Colorado Springs, CO area (Schriever SFB / Peterson SFB)
• Standard office environment; periodic surge activity around monthly reporting cycles
• Access to classified spaces and systems requiring adherence to all applicable security protocols

Compensation and Benefits

NetSEA offers competitive benefits include a comprehensive fringe package (health, dental, vision, short/long-term disability, 401(k) with Safe Harbor matching, paid time off, and holiday pay), consistent with NetSEA's standard employee benefits program.

Travel Requirements

NetSEA Technologies, LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.