Senior Risk and Vulnerability Analyst

Peraton; Arizona; On-site; USD 120,000 - 150,000; Full time

Job summary

Peraton is seeking a Senior Risk and Vulnerability Analyst to support the 24x7 Security Operations Center. You will identify, analyze, and prioritize vulnerabilities across enterprise, cloud, and application environments to maintain visibility and timely remediation.

The role requires hands-on experience with vulnerability scanning tools, cloud security, API scanning, and established security frameworks. Location: Chandler, AZ or Washington DC; U.S.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or related field; 4 years may substitute.
• 8+ years in security operations, vulnerability management, or risk analysis; 6 years with a Master's or 3 years with a PhD.
• Hands-on experience with vulnerability scanning tools, cloud compliance platforms, ISVM, and API scanning.
• Experience supporting automation of vulnerability analysis and reporting.
• Familiarity with DHS 4300A, NIST SP 800-115, and CISA BOD 23-01 compliance.
• U.S. citizenship required; Active Secret security clearance required.

Responsibilities

• Support 24x7 SOC operations by performing continuous vulnerability monitoring and risk analysis.
• Execute vulnerability assessments using industry-standard scanning tools across networks, systems, cloud, and APIs.
• Conduct cloud compliance, ISVM, and API security scanning, validating findings and false positives.
• Correlate vulnerability data with SOC alerts, threat intelligence, and active incidents.
• Automate vulnerability reporting, risk scoring, and remediation tracking workflows.
• Track and enforce remediation timelines in coordination with SOC, IR, and engineering teams.
• Ensure compliance with DHS 4300A, NIST SP 800-115, and CISA BOD 23-01 requirements.
• Provide operational risk summaries, metrics, and reports to SOC leadership and stakeholders.

Skills

Vulnerability analysis

Security operations

Risk analysis

Automation

Cloud security

API security

Threat intelligence

Education

Bachelor's degree in related field

Advanced degree acceptable

Tools

ISVM

Vulnerability scanners

Job description

Required:

• Bachelor's degree in Cybersecurity, Information Technology, or related field. An additional 4 years will be considered in lieu of the degree requirement.
• Minimum of 8 years of experience in security operations, vulnerability management, or risk analysis. 6 years of experience with a Masters Degree or 3 years with a PhD.
• Hands-on experience with industry vulnerability scanning tools, cloud compliance platforms, ISVM, and API scanning.
• Experience supporting automation of vulnerability analysis and reporting.
• Familiarity with DHS 4300A, NIST SP 800-115, and CISA BOD 23-01 compliance.
• U.S. citizenship required.
• Active Secret security clearance required.

Preferred:

• 3-5 years of experience in security operations, vulnerability management, or risk analysis.

Peraton is currently seeking a Senior Risk and VulnerabilityAnalyst.

Location: Chandler, AZ or Washington DC

Role and Responsibilities:

The Senior Risk and Vulnerability Analyst supports a 24x7 Security Operations Center (SOC) by identifying, analyzing, and prioritizing vulnerabilities and security risks across enterprise, cloud, and application environments. This role ensures continuous visibility, compliance, and timely remediation to reduce operational and mission risk.

You will:

• Support 24x7 SOC operations by performing continuous vulnerability monitoring and risk analysis.
• Execute vulnerability assessments using industry-standard scanning tools across networks, systems, cloud, and APIs.
• Conduct cloud compliance, ISVM, and API security scanning, validating findings and false positives.
• Correlate vulnerability data with SOC alerts, threat intelligence, and active incidents.
• Automate vulnerability reporting, risk scoring, and remediation tracking workflows.
• Track and enforce remediation timelines in coordination with SOC, IR, and engineering teams.
• Ensure compliance with DHS 4300A, NIST SP 800-115, and CISA BOD 23-01 requirements.
• Provide operational risk summaries, metrics, and reports to SOC leadership and stakeholders.