Remote Vulnerability Management Analyst (Federal)

SkyePoint Decisions; Bethesda (MD); On-site; USD 110,000 - 130,000; Part time

Benefits offered by this job

Certification incentives

PTO

Health insurance

401(k) matching

Job summary

SkyePoint Decisions is seeking a Vulnerability Management Analyst to identify, analyze, track, and report security vulnerabilities across enterprise systems, applications, databases, cloud environments, and network infrastructure.

The Analyst collaborates with system owners, security engineers, RMF personnel, and operational teams to ensure vulnerabilities are properly assessed, prioritized, remediated, and verified in accordance with HHS and Federal cybersecurity requirements.

Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or a related field.
• Minimum 5 years of experience in cybersecurity, vulnerability management, information assurance, or security operations supporting Federal environments.
• Experience supporting POA&Ms development, remediation tracking, corrective action validation, or vulnerability closure activities.
• Experience conducting vulnerability assessments and remediation tracking.
• Familiarity with NIST RMF (SP 800-37), NIST SP 800-53 Rev. 5, FISMA, and Federal cybersecurity compliance requirements.
• Experience analyzing vulnerability data and developing remediation recommendations.
• Strong analytical, problem-solving, and communication skills.
• U.S. Citizenship required.
• Ability to obtain and maintain a Public Trust.

Responsibilities

• Perform vulnerability assessments and analysis across information systems and infrastructure.
• Perform threat-informed prioritization using exploitability, threat intelligence, KEV, mission criticality, system exposure, and compensating controls.
• Assess vulnerability risk within system criticality, data sensitivity, and risk tolerance.
• Develop vulnerability dashboards, remediation metrics, trend analyses, and executive reporting products.
• Review and analyze vulnerability scan results from enterprise security tools.
• Validate findings to determine severity, exploitability, and potential impact.
• Coordinate with technical teams to assess remediation requirements and timelines.
• Manage the full lifecycle of vulnerability identification, remediation, and closure.
• Track vulnerabilities from discovery through remediation and validation.
• Maintain vulnerability repositories, remediation records, and status reporting.
• Monitor remediation progress and elevate overdue findings as appropriate.
• Verify corrective actions and document closure activities.
• Support continuous monitoring activities across systems and applications.
• Analyze vulnerability trends and identify recurring issues.
• Evaluate security risks associated with discovered vulnerabilities.
• Collaborate with RMF/A&A teams to support Authorization to Operate (ATO) activities.
• Assist with the management and tracking of Plans of Action and Milestones (POA&Ms).
• Provide vulnerability-related evidence and documentation for audits, assessments, and authorization activities.

Skills

Vulnerability management

Cybersecurity

Risk analysis

Communication

Federal environments

Education

Bachelor's degree in Cybersecurity or related field

Tools

Vulnerability scanning tools

RMF/ATO tooling

Job description

SkyePoint Decisions is seeking a Vulnerability Management Analyst to identify, analyze, track, and report security vulnerabilities across enterprise systems, applications, databases, cloud environments, and network infrastructure.

The Analyst collaborates with system owners, security engineers, RMF personnel, and operational teams to ensure vulnerabilities are properly assessed, prioritized, remediated, and verified in accordance with HHS and Federal cybersecurity requirements.