Security Operations: Vulnerability & Risk Analyst

Peraton; United States; On-site; USD 80,000 - 128,000; Full time

Job summary

Peraton is seeking a Risk and Vulnerability Analyst to support a 24x7 Security Operations Center (SOC) across enterprise, cloud, and application environments. Location: Chandler, AZ or Washington DC.

You will identify, analyze, and prioritize vulnerabilities and risks to reduce operational and mission risk. Responsibilities include continuous vulnerability monitoring, cloud and API security scanning, automation of reporting and risk scoring, and ensuring compliance with DHS 4300A, NIST SP

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or related field (or 4 years of relevant experience in lieu).
• Minimum 2 years of security operations, vulnerability management, or risk analysis.
• Hands-on experience with vulnerability scanning tools, cloud compliance platforms, ISVM, and API scanning.
• Experience supporting automation of vulnerability analysis and reporting.
• Familiarity with DHS 4300A, NIST SP 800-115, and CISA BOD 23-01.
• U.S. citizenship and an active Secret security clearance.

Responsibilities

• Support 24x7 SOC operations by performing continuous vulnerability monitoring and risk analysis.
• Execute vulnerability assessments using industry-standard scanning tools across networks, systems, cloud, and APIs.
• Conduct cloud compliance, ISVM, and API security scanning, validating findings and false positives.
• Correlate vulnerability data with SOC alerts, threat intelligence, and active incidents.
• Automate vulnerability reporting, risk scoring, and remediation tracking workflows.
• Track and enforce remediation timelines in coordination with SOC, IR, and engineering teams.
• Provide operational risk summaries, metrics, and reports to SOC leadership and stakeholders.

Job description

Peraton is seeking a Risk and Vulnerability Analyst to support a 24x7 Security Operations Center (SOC) across enterprise, cloud, and application environments. Location: Chandler, AZ or Washington DC.

You will identify, analyze, and prioritize vulnerabilities and risks to reduce operational and mission risk. Responsibilities include continuous vulnerability monitoring, cloud and API security scanning, automation of reporting and risk scoring, and ensuring compliance with DHS 4300A, NIST SP