RMF Vulnerability Analyst - Cyber Defense

Quantum Research International; Springfield (VA); On-site; USD 95,000 - 150,000; Full time

Job summary

Quantum Research International, Inc. in Springfield, VA, seeks a Vulnerability Management Analyst to support NGA Defender RMF assessments on-site. You will evaluate systems, coordinate task orders, and develop defense-in-depth measures to reduce risk.

Candidates should have a technical degree or equivalent certifications (Security+, PenTest+, etc.), hands-on experience with Nessus/ACAS/Tenable, and strong networking knowledge to prioritize remediation actions and ensure compliance.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, IT or related field.
• Experience with vulnerability management and security assessments.
• Certifications such as Security+, PenTest+, GSEC acceptable in lieu of degree.

Responsibilities

• Perform assessments of systems and networks within the environment and identify deviations from policy.
• Review, promulgate, and track Cyber Task Orders; coordinate with owners to resolve findings.
• Develop measures of effectiveness for defense-in-depth architectures against vulnerabilities.
• Identify systemic security issues from vulnerability and configuration data (STIG).
• Prioritize vulnerability reduction activities based on threat data and mission importance.
• Conduct vulnerability scans and mitigate vulnerabilities in security systems.
• Analyze web app vulnerability assessments and recommend remediation actions.
• Apply cybersecurity/privacy principles to organizational requirements.

Skills

Vulnerability mgmt

Threat analysis

Networking concepts

Cybersecurity fundamentals

Tableau

Education

Bachelor's degree in Computer Science, Cybersecurity, IT or related field

Tools

Nessus

ACAS

Tenable

Job description

Quantum Research International, Inc. in Springfield, VA, seeks a Vulnerability Management Analyst to support NGA Defender RMF assessments on-site. You will evaluate systems, coordinate task orders, and develop defense-in-depth measures to reduce risk.

Candidates should have a technical degree or equivalent certifications (Security+, PenTest+, etc.), hands-on experience with Nessus/ACAS/Tenable, and strong networking knowledge to prioritize remediation actions and ensure compliance.