Remote Vulnerability Assessment Analyst

Seneca Holdings; Washington (District of Columbia); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical benefits

401K plan

Remote work

Job summary

Seneca Technologies is actively seeking a Vulnerability Assessment Analyst to support a DoW agency contractor environment. The role focuses on identifying, assessing, and tracking security vulnerabilities across on-premises and cloud environments, with emphasis on remediation planning and risk-based decision support.

Responsibilities include coordinating with system owners, cybersecurity teams, and stakeholders to enhance the agency's security posture, perform RMF-related tasks, and support

Qualifications

• Experience performing vulnerability assessments and security scanning.
• Ability to analyze findings and recommend risk-based remediation actions.
• Knowledge of RMF, security authorization, and continuous monitoring principles.

Responsibilities

• Conduct vulnerability scans and security assessments of information systems, applications, networks, and cloud environments.
• Analyze vulnerability results and determine potential impact to systems and mission operations.
• Develop and recommend remediation strategies to address identified vulnerabilities.
• Track remediation efforts and coordinate with owners to ensure timely resolution.
• Support continuous monitoring programs with recurring assessments and validation of corrective actions.
• Prioritize vulnerabilities based on severity, exploitability, and mission impact.
• Generate reports, metrics, dashboards, and status updates on vulnerability management.

Skills

Vulnerability Scanning

Risk Assessment

Remediation Planning

RMF

Security Compliance

Education

Bachelor's degree in Cybersecurity/IT/CS

5+ years vulnerability management experience

Tools

Tenable Nessus

Tenable Security Center

Cloud security tools

Job description

Seneca Technologies is actively seeking a Vulnerability Assessment Analyst to support a DoW agency contractor environment. The role focuses on identifying, assessing, and tracking security vulnerabilities across on-premises and cloud environments, with emphasis on remediation planning and risk-based decision support.

Responsibilities include coordinating with system owners, cybersecurity teams, and stakeholders to enhance the agency's security posture, perform RMF-related tasks, and support