Remote Vulnerability Management Analyst (Data Forensics)

cFocus Software Incorporated; United States; Remote; USD 100,000 - 140,000; Full time

Job summary

cFocus Software Incorporated seeks a Vulnerability Management Analyst to support the United States DFC program. The role is remote and requires an Active Public Trust clearance.

You will coordinate authenticated vulnerability scans, analyze outputs from enterprise platforms, and validate findings to drive remediation aligned with federal standards. The ideal candidate has 5+ years in cybersecurity, hands-on vulnerability management experience, and the ability to communicate risk to diverse

Qualifications

• Active Public Trust clearance required.
• B.S. Computer Science, IT, or related field.
• 5+ years in cybersecurity, incl. 3+ years in vulnerability management or related roles.
• Hands-on with authenticated scans and vulnerability validation using enterprise platforms.
• Ability to assess risk using CVSS, asset criticality, exposure, and threat intel.
• Familiar with NIST RMF, NIST SP 800-53, CISA KEV, and federal monitoring.
• Able to communicate risk to technical and nontechnical stakeholders.
• Strong written communication and data quality.
• Security certifications preferred (e.g., Security+, CySA+, CEH, GCVA, CISSP).

Responsibilities

• Coordinate authenticated vulnerability scans with DFC stakeholders.
• Analyze output from Tenable, Qualys, and Microsoft Defender.
• Validate scanner findings against the operational environment; differentiate true findings from false positives.
• Assess and assign severity using CVSS, policy, and threat intel.
• Recommend remediation priorities, timelines, and evidence requirements.
• Coordinate with engineering and operations to establish remediation ownership and dates.
• Provide rapid analysis for KEV, BOD 22-01, and other directives.
• Notify ISSM within four hours of applicable notifications.
• Deliver written impact assessments within one business day.
• Document affected systems, boundaries, severity, and remediation status.
• Track remediation against deadlines and ensure traceability between CSAM and ServiceNow.
• Create POA&M items in CSAM within three business days of finding or direction.
• Maintain bidirectional traceability and data quality across systems.
• Prepare risk-acceptance packages when remediation is constrained.
• Route recommendations for federal decision and record approved actions in CSAM.

Skills

Public Trust clearance

5+ years cybersecurity

Vulnerability management

Communication of risk

Strong writing

Education

B.S. Computer Science / IT / related field

Tools

Tenable Nessus

Qualys

Microsoft Defender

Job description

cFocus Software Incorporated seeks a Vulnerability Management Analyst to support the United States DFC program. The role is remote and requires an Active Public Trust clearance.

You will coordinate authenticated vulnerability scans, analyze outputs from enterprise platforms, and validate findings to drive remediation aligned with federal standards. The ideal candidate has 5+ years in cybersecurity, hands-on vulnerability management experience, and the ability to communicate risk to diverse