Risk and Vulnerability Analyst II

SOS International LLC; Washington (District of Columbia); On-site; USD 80,000 - 110,000; Full time

Job summary

SOSi seeks a Risk and Vulnerability Analyst II to support vulnerability assessment and risk analysis activities. This role conducts vulnerability scanning and analysis, supports remediation efforts, and maintains scan operations to improve enterprise visibility into security weaknesses.

Requirements include a Bachelor’s Degree and Secret clearance eligibility. The position is based in Washington, DC, with core hours Monday–Friday and possible after-hours support as needed.

Qualifications

• Bachelor’s degree required.
• 3–5 years of security-related experience recommended.
• Secret clearance eligibility required.

Responsibilities

• Perform vulnerability assessments across OS, databases, web apps, and enterprise infrastructure.
• Analyze vulnerabilities and support remediation recommendations.
• Support cloud compliance scans and assessment activities.
• Troubleshoot scanning tools, consoles, and configurations.
• Create and maintain scan reports, policies, and user access for assessment tools.
• Coordinate with cyber defense engineering to support tool operations.

Skills

Vulnerability scanning

Security analysis

Cloud security

Automation

Vulnerability management

Education

Bachelor’s Degree

Tools

Vulnerability scanners

Job description

Washington, DC, USA

Full-time

Clearance Requirement: Secret

Company Description

Founded in 1989, SOSi is among the largest private, founder-owned technology and services integrators in the defense and government services industry. We deliver tailored solutions, tested leadership, and trusted results to enable national security missions worldwide.

Job Description

***** This position is contingent upon contract award *****

Overview

SOSi is seeking a Risk and Vulnerability Analyst II to support vulnerability assessment and risk analysis activities in alignment with our customer. This role is responsible for conducting vulnerability scanning and analysis, supporting remediation efforts, maintaining scan operations, and helping improve enterprise visibility into security weaknesses and cyber risk.

Responsibilities

• Perform vulnerability assessments and security scanning across operating systems, databases, web applications, and enterprise infrastructure
• Analyze vulnerabilities and support development of remediation recommendations
• Support cloud compliance scans and assessment activities
• Troubleshoot scan issues and support maintenance of vulnerability scanning tools, consoles, and configurations
• Support automated and scheduled scanning activities, including scan planning, execution, and reporting
• Support ad hoc or emergency vulnerability scanning in support of incident investigation and response activities
• Create and maintain scan reports, data feeds, scan policies, repositories, and user access/roles for assessment tools
• Support API discovery and scanning, and integration of assessment data into third-party tools
• Coordinate with cyber defense engineering and system teams to support tool operations, testing, and vulnerability management activities

Qualifications

Experience

• Three (3) to five (5) years of security-related experience
• Experience with operating system, database, and web application vulnerability scanning
• Experience supporting cloud compliance scanning
• Experience troubleshooting vulnerability scan tools and scan configurations
• Experience with automation supporting vulnerability assessment operations
• Experience supporting Information System Vulnerability Management (ISVM) scans and compliance activities
• Experience with API discovery and security scanning

Education

• Bachelor’s Degree
• Clearance/Suitability : Secret (eligible)

Work Environment

• Normal office conditions with potential to perform duties in deployed locations.
• Core hours of operation are Monday through Friday, 0600 – 1700.
• May be requested to work evenings and weekends to meet program and contract needs.

Working at SOSi

All interested individuals will receive consideration and will not be discriminated against for any reason.

SOSi is an equal employment opportunity employer and affirmative action employer. All interested individuals will receive consideration and will not be discriminated against on the basis of race, color, religion, sex, national origin, disability, age, sexual orientation, gender identity, genetic information, or protected veteran status. SOSi takes affirmative action in support of its policy to advance diversity and inclusion of individuals who are minorities, women, protected veterans, and individuals with disabilities.