Remote Senior Vulnerability Management Analyst

Digital Management Llc; Tysons (VA); Hybrid; USD 109,000 - 134,000; Full time

Job summary

DMI is seeking a Vulnerability Management Analyst to lead the vulnerability program for a State‑Level Department of IT, Security Assessment Function. The role requires hands-on engineering, RMF support, and coordination with SOC.

The ideal candidate will manage scan scheduling, patch efforts, and remediation, while ensuring secure configurations and compliance with standards. Remote US-based with potential after-hours work.

Qualifications

• Minimum five years supporting RMF-based vulnerability scans
• Ten+ years LAN admin experience (Windows/Linux)
• 5+ years with vulnerability scanners (Nessus/TSC)
• 5+ years in security assessment project delivery
• Associates or Bachelor degree in CS/IS/Engineering
• Willingness for after-hours/on-call support

Responsibilities

• Oversee daily vulnerability management program
• Coordinate with SOC and Security Assessment on scanning
• Plan, monitor, and close vulnerability tasks
• Configure patch and secure configuration scans
• Maintain scan assets, plugins, and STIG/CIS files
• Troubleshoot failed scan jobs and credential issues
• Analyze scan results and document findings
• Develop remediation strategies and artifacts
• Prepare status reports for stakeholders
• Ensure integrations with asset and risk platforms

Skills

Self-starter

Excellent communication

Team player

Able to work after hours

Analytical mindset

Documentation skills

Problem solving

Education

Associate or Bachelor degree in CS/IS/Engineering

Tools

Tenable Security Center/Nessus

Tenable One

WebInspect

DB Protect

RSA Archer

ServiceNow GRC

CSAM

Job description

DMI is seeking a Vulnerability Management Analyst to lead the vulnerability program for a State‑Level Department of IT, Security Assessment Function. The role requires hands-on engineering, RMF support, and coordination with SOC.

The ideal candidate will manage scan scheduling, patch efforts, and remediation, while ensuring secure configurations and compliance with standards. Remote US-based with potential after-hours work.