Remote Vulnerability Management Analyst

System One; Bethesda (MD); Hybrid; USD 90,000 - 120,000; Full time

Benefits offered by this job

Health and welfare benefits

401(k) plan

Job summary

System One in Bethesda, MD is seeking a Mid-Level Vulnerability Management Analyst to perform vulnerability scanning, analysis, reporting, and remediation tracking across NIH/OD-managed systems.

You will coordinate with stakeholders, monitor CVE sources, and develop remediation recommendations while working primarily remote with occasional onsite meetings. This role requires a BS in a related field and 3–6 years of cybersecurity experience; certifications are a plus.

Qualifications

• Bachelor's degree in Cybersecurity, CS, IT, or related field.
• 3–6 years of cybersecurity experience with vulnerability management.
• Experience with enterprise vulnerability management platforms.
• Knowledge of CVEs, CVSS, KEVs, NIST guidance, and FISMA.
• Strong analytical and communication skills.

Responsibilities

• Perform scheduled and ad hoc credentialed vulnerability scans.
• Review and analyze vulnerability scan results.
• Identify critical and known exploited vulnerabilities.
• Monitor the CISA KEV Catalog and other approved sources.
• Notify technical contacts of vulnerabilities and configuration issues.
• Develop remediation recommendations.
• Track vulnerabilities through closure and validate remediation.
• Support High Value Asset assessments.
• Prepare recurring and ad hoc vulnerability reports.
• Maintain documentation and support process improvements.

Skills

Analytical skills

Communication skills

Vulnerability management

Education

Bachelor's degree in Cybersecurity, CS, IT, or related field

Tools

Vulnerability management platforms

Job description

System One in Bethesda, MD is seeking a Mid-Level Vulnerability Management Analyst to perform vulnerability scanning, analysis, reporting, and remediation tracking across NIH/OD-managed systems.

You will coordinate with stakeholders, monitor CVE sources, and develop remediation recommendations while working primarily remote with occasional onsite meetings. This role requires a BS in a related field and 3–6 years of cybersecurity experience; certifications are a plus.