Senior Vulnerability Management Analyst

Peraton; Bethesda (MD); Hybrid; USD 104,000 - 166,000; Full time

Job summary

Peraton is seeking a Vulnerability Management Analyst to support the FAA under the BNATCS contract, delivering cybersecurity and risk management services to protect NAS systems and critical applications. You will identify, analyze, and remediate vulnerabilities using FAA-approved tools, coordinate with stakeholders, and contribute to continuous monitoring and governance.

The role requires collaboration with FAA owners, engineers, and operations teams, with strong emphasis on risk assessment,

Qualifications

• Bachelor’s degree and 8+ years in vulnerability management or cyber security.
• Master’s degree and 6+ years in relevant field.
• PhD and 3+ years in relevant field.
• Experience with vulnerability scanning tools.
• Knowledge of NIST RMF, FISMA, and federal security policies.
• Ability to obtain Public Trust clearance.

Responsibilities

• Conduct regular vulnerability scanning of FAA networks and systems.
• Analyze scan results and assess risk, differentiate false positives.
• Prepare vulnerability and risk reports for stakeholders.
• Coordinate remediation with FAA owners, engineers, and teams.
• Support RMF, ATO, and continuous monitoring activities.
• Stay current with CVEs and security advisories.

Skills

Analytical skills

Communication

Documentation

Public Trust suitability

Remote work readiness

Education

Bachelor's degree

Master's degree

PhD

Tools

Tenable

Qualys

ACAS

Rapid7

Job description

Responsibilities

The Vulnerability Management Analyst will support the Federal Aviation Administration (FAA) under the BNATCS contract, providing specialized cybersecurity and risk management services to help protect National Airspace System (NAS) systems, enterprise infrastructure, and critical mission applications. This role focuses on identifying, analyzing, tracking, and mitigating vulnerabilities across FAA environments, ensuring compliance with federal security requirements, and contributing to a proactive cybersecurity posture.

Key Responsibilities may include-

Vulnerability Identification & Analysis

• Perform regular vulnerability scanning of FAA networks, systems, and applications using FAA-approved toolsets (e.g., Tenable Nessus, Qualys, ACAS, Rapid7).
• Analyze scan results to identify threats, misconfigurations, and weaknesses across FAA environments.
• Validate findings, assess severity and risk impact, and distinguish false positives from actionable vulnerabilities.

Risk Prioritization & Reporting

• Prioritize vulnerabilities based on FAA risk models, mission impact, threat intelligence, and criticality of affected assets.
• Prepare detailed vulnerability and risk reports for FAA stakeholders, ISSOs, SOC teams, and system owners.
• Support creation of dashboards, metrics, and trend analyses to measure vulnerability remediation performance.

Remediation Coordination

• Collaborate with FAA system owners, network engineers, developers, and operations teams to drive timely remediation of findings.
• Track remediation efforts, document mitigation strategies, and verify closure of vulnerabilities.
• Provide technical recommendations to reduce exposure and strengthen system defenses.

Compliance & Governance

• Support adherence to federal cybersecurity frameworks including NIST 800-53, NIST CSF, FISMA, TIC, and FAA information security policies.
• Assist with POA&M (Plan of Action & Milestones) documentation, updates, and lifecycle management.
• Participate in ATO (Authorization to Operate) and continuous monitoring activities within the RMF process.

Continuous Improvement & Security Enhancement

• Contribute to development and refinement of vulnerability management procedures, SOPs, and scanning schedules.
• Stay current with emerging threats, CVEs, and security advisories relevant to aviation and federal agencies.
• Support incident response teams by providing vulnerability insights that inform threat analysis and containment.

** This offer is contingent upon Peraton’s award of the associated contract **

Qualifications

Required Qualifications

• Minimum of a Bachelor’s degree and 8 years of experience, a Master’s degree and 6 years of relevent experience, or a PhD and 3 years of experience in vulnerability management, cybersecurity operations, or IT security. Cybersecurity, IT, Computer Science, or related degrees are preferred.
• Working knowledge of vulnerability scanning tools (Tenable, Qualys, etc.) and security information platforms.
• Understanding of NIST RMF, FISMA, and federal security policies.
• Experience analyzing CVEs, CVSS scoring, and vulnerability exploitability.
• Strong analytical, communication, and documentation skills.
• Ability to obtain and maintain the required Public Trust clearance.
• This is a remote capable position, however, candidates must reside in the Maryland/DC/NoVA local area.

Preferred Qualifications

• Prior experience supporting FAA, DOT, or other federal cybersecurity programs.
• Familiarity with National Airspace System (NAS) environments or aviation technology.
• Certifications such as Security , CySA , CEH, GSEC, GCIH, or similar.
• Experience with POA&M management, RMF packages, or continuous monitoring activities.
• Knowledge of configuration management and patch management processes.

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.

Target Salary Range

$104,000 – $166,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.