RMF Vulnerability Analyst – Onsite in Springfield, VA

Quantum-Research-International,-Inc; Springfield (VA); On-site; USD 90,000 - 130,000; Full time

Job summary

Quantum Research International, Inc. is seeking a Vulnerability Assessment Analyst to support NGA Defender Cybersecurity Vulnerability Management in Springfield, VA.

This on-site role requires assessing systems, identifying deviations, and guiding remediation within RMF/NIST guidelines. Candidates should have a bachelor's in a relevant field, TS/SCI eligibility, and hands-on vulnerability tooling experience (Nessus, ACAS, Tenable).

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology or related field.
• Experience with vulnerability management and RMF processes.
• Knowledge of cybersecurity threats, cryptography, and privacy requirements.

Responsibilities

• Perform assessments of systems and networks and identify deviations from configurations and policies.
• Review, promulgate, and track Cyber Task Orders; coordinate remediation with system owners.
• Develop measures of effectiveness for defense-in-depth architectures against vulnerabilities.
• Prioritize remediation activities based on threat data and mission criticality.
• Conduct vulnerability scans and mitigate findings in security systems.
• Analyze web app vulnerability assessments and recommend remediation actions.
• Apply cybersecurity and privacy principles to organizational requirements.

Skills

NIST RMF

Vulnerability assessment

Nessus

ACAS

Ten able

Security+

Network security

Education

Bachelor's degree in CS/Cybersecurity

TS/SCI eligible

Tools

Nessus

ACAS

Tenable

Job description

Quantum Research International, Inc. is seeking a Vulnerability Assessment Analyst to support NGA Defender Cybersecurity Vulnerability Management in Springfield, VA.

This on-site role requires assessing systems, identifying deviations, and guiding remediation within RMF/NIST guidelines. Candidates should have a bachelor's in a relevant field, TS/SCI eligibility, and hands-on vulnerability tooling experience (Nessus, ACAS, Tenable).