Remote DoD Vulnerability Management Analyst

DecisionPoint Corporation; Reston (VA); On-site; USD 120,000 - 150,000; Full time

Job summary

DecisionPoint Corporation seeks a Vulnerability Management Analyst to support DoD-aligned cybersecurity operations. You will conduct ACAS scans, verify patch levels, analyze risk, and maintain POA&Ms across cloud and on-prem environments.

The role emphasizes collaboration with engineering and leadership to improve risk posture. Qualified candidates will have 5+ years in vulnerability management, DoD RMF familiarity, and active Security+/ACAS/CEH-type certifications.

Qualifications

• Bachelor's degree in Cybersecurity/IT or related field is required.
• Minimum 5 years in vulnerability management or security operations.
• Experience running ACAS/Nessus scans and validating data.
• Knowledge of RMF/DoD security controls and POA&Ms.

Responsibilities

• Conduct ACAS vulnerability scans across enterprise systems, apps, and cloud workloads.
• Validate scan results, confirm patch levels, and verify remediation status.
• Analyze vulnerabilities for exploitability and mission impact.
• Prioritize findings based on severity and DoD guidance.
• Coordinate remediation with engineering and cloud teams.
• Update and maintain POA&Ms with progress details.
• Provide vulnerability reports and dashboards to leadership.
• Support RMF continuous monitoring and STIG validation.
• Maintain scanning schedules and asset coverage.
• Contribute to incident response when threats are identified.

Skills

Analytical abilities

Written communication

Attention to detail

Multitasking

Documentation

Education

Bachelor's degree in Cybersecurity/Information Technology

Tools

ACAS

Nessus

SIEM

Job description

DecisionPoint Corporation seeks a Vulnerability Management Analyst to support DoD-aligned cybersecurity operations. You will conduct ACAS scans, verify patch levels, analyze risk, and maintain POA&Ms across cloud and on-prem environments.

The role emphasizes collaboration with engineering and leadership to improve risk posture. Qualified candidates will have 5+ years in vulnerability management, DoD RMF familiarity, and active Security+/ACAS/CEH-type certifications.