Senior Vulnerability Management Analyst

Compass Pointe Consulting, LLC; Bethesda (MD); On-site; USD 110,000 - 140,000; Full time

Job summary

Compass Pointe Consulting, LLC is seeking a Senior Security Analyst focused on Vulnerability Management in Bethesda, MD. You'll work with the ISSO and safeguard IT infrastructure within a broader IT program that supports help desk, systems, network, and incident response.

Responsibilities include leading vulnerability management, coordinating remediation, and ensuring compliance with FISMA and FedRAMP. The role requires 3–5 days on-site and CISSP certification (or ability to obtain).

Qualifications

• Bachelor’s degree in computer science, cyber security, engineering, or related field.
• 5–7 years of progressive IT security experience with at least 3 years in vulnerability management.
• Ability to translate technical risks into clear business impacts for executives and teams.
• Experience managing enterprise vulnerability management platforms (Tenable/Nessus).
• Understanding vulnerability management lifecycle, patching, and risk scoring (CVSS).
• Familiarity with cloud and hybrid environments (AWS/GCP).
• Experience with Windows/Linux/Unix and network security hardening.
• Ability to coordinate with program staff, executives, and vendors to meet security goals.
• CISSP certification or ability to obtain within 6 months; public trust suitability before start.

Responsibilities

• Lead the vulnerability management lifecycle using Tenable.sc, Tenable.io, and Nessus in hybrid environments.
• Analyze, prioritize, and track remediation with IT operations and system owners.
• Maintain scan schedules, asset groups, and dashboards; report risk posture and remediation progress.
• Define scanner architecture, data flows, and tuning to minimize false positives.
• Develop and maintain VM policy documentation and remediation tracking.
• Support security projects requiring compliance with government policies or standards.
• Act as SME for vulnerability management tools and processes; update practices as needed.
• Ensure compliance with FISMA and FedRAMP for the organization’s IT programs.

Skills

Vulnerability management

Tenable/Nessus

Cloud platforms (AWS/GCP)

FISMA FedRAMP

CISSP

Scripting (Python/PowerShell)

Communication

Education

Bachelor’s degree in computer science / cyber security / engineering

Tools

Tenable.sc

Tenable.io

Nessus Manager

Nessus

Job description

Compass Pointe Consulting, LLC is seeking a Senior Security Analyst focused on Vulnerability Management in Bethesda, MD. You'll work with the ISSO and safeguard IT infrastructure within a broader IT program that supports help desk, systems, network, and incident response.

Responsibilities include leading vulnerability management, coordinating remediation, and ensuring compliance with FISMA and FedRAMP. The role requires 3–5 days on-site and CISSP certification (or ability to obtain).