Senior Risk and Vulnerability Analyst

Peraton; Washington (District of Columbia); On-site; USD 104,000 - 166,000; Full time

Job summary

Peraton is seeking a Senior Risk and Vulnerability Analyst to support a 24x7 Security Operations Center, identifying, analyzing, and prioritizing vulnerabilities across enterprise, cloud, and application environments.

The role requires coordinating remediation efforts, enforcing timelines with SOC, IR, and engineering teams, and ensuring adherence to DHS 4300A, NIST SP 800-115, and CISA BOD 23-01. U.S. citizenship and active Secret clearance are required.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or related field. An additional 4 years will be considered in lieu of the degree requirement.
• Minimum of 8 years of experience in security operations, vulnerability management, or risk analysis. 6 years of experience with a Masters Degree or 3 years with a PhD.
• Hands-on experience with industry vulnerability scanning tools, cloud compliance platforms, ISVM, and API scanning.
• Experience supporting automation of vulnerability analysis and reporting.
• Familiarity with DHS 4300A, NIST SP 800-115, and CISA BOD 23-01 compliance.
• U.S. citizenship required.
• Active Secret security clearance required.

Responsibilities

• Support 24x7 SOC operations by performing continuous vulnerability monitoring and risk analysis.
• Execute vulnerability assessments using industry-standard scanning tools across networks, systems, cloud, and APIs.
• Conduct cloud compliance, ISVM, and API security scanning, validating findings and false positives.
• Correlate vulnerability data with SOC alerts, threat intelligence, and active incidents.
• Automate vulnerability reporting, risk scoring, and remediation tracking workflows.
• Track and enforce remediation timelines in coordination with SOC, IR, and engineering teams.
• Ensure compliance with DHS 4300A, NIST SP 800-115, and CISA BOD 23-01 requirements.
• Provide operational risk summaries, metrics, and reports to SOC leadership and stakeholders.

Skills

Vulnerability management

Security operations

Risk analysis

Automation

Cloud security

Compliance awareness

Team collaboration

Education

Bachelor's degree in Cybersecurity or related field

Tools

Vulnerability scanning tools

ISVM

API scanning tools

Cloud compliance platforms

Job description

Senior Risk and Vulnerability Analyst

Job Locations: US-AZ-Chandler | US-DC-Washington

Responsibilities

Peraton is currently seeking a Senior Risk and Vulnerability Analyst.

Location: Chandler, AZ or Washington DC

Role and Responsibilities:

The Senior Risk and Vulnerability Analyst supports a 24x7 Security Operations Center (SOC) by identifying, analyzing, and prioritizing vulnerabilities and security risks across enterprise, cloud, and application environments. This role ensures continuous visibility, compliance, and timely remediation to reduce operational and mission risk.

You will:

• Support 24x7 SOC operations by performing continuous vulnerability monitoring and risk analysis.
• Execute vulnerability assessments using industry-standard scanning tools across networks, systems, cloud, and APIs.
• Conduct cloud compliance, ISVM, and API security scanning, validating findings and false positives.
• Correlate vulnerability data with SOC alerts, threat intelligence, and active incidents.
• Automate vulnerability reporting, risk scoring, and remediation tracking workflows.
• Track and enforce remediation timelines in coordination with SOC, IR, and engineering teams.
• Ensure compliance with DHS 4300A, NIST SP 800-115, and CISA BOD 23-01 requirements.
• Provide operational risk summaries, metrics, and reports to SOC leadership and stakeholders.

Qualifications

Required:

• Bachelor's degree in Cybersecurity, Information Technology, or related field. An additional 4 years will be considered in lieu of the degree requirement.
• Minimum of 8 years of experience in security operations, vulnerability management, or risk analysis. 6 years of experience with a Masters Degree or 3 years with a PhD.
• Hands-on experience with industry vulnerability scanning tools, cloud compliance platforms, ISVM, and API scanning.
• Experience supporting automation of vulnerability analysis and reporting.
• Familiarity with DHS 4300A, NIST SP 800-115, and CISA BOD 23-01 compliance.
• U.S. citizenship required.
• Active Secret security clearance required.

Preferred:

• 3-5 years of experience in security operations, vulnerability management, or risk analysis.

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.

Target Salary Range

$104,000 - $166,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.