Senior Vulnerability Management Analyst (Remote)

DMI (Digital Management, Inc.); United States; Remote; USD 122,000 - 152,000; Full time

Job summary

DMI is seeking a Vulnerability Management Analyst to lead the vulnerability management program for a State‑level IT function. The role combines hands‑on engineering with project leadership to plan, implement, and close remediation tasks, including patch audits and reporting to stakeholders.

The ideal candidate has RMF, Tenable products, and GRC experience and can operate autonomously or within a team while communicating clearly with Security Operations and IT teams.

Qualifications

• 5+ years of RMF experience supporting vulnerability scans and continuous monitoring.
• 10+ years LAN administration with Windows and Linux experience.
• 5+ years with Tenable/Nessus-based scanners and vulnerability analysis.
• Experience planning, executing, and closing security assessment projects.
• Associates or bachelor's degree in a related technical field.
• Able to work outside regular hours or on-call as needed.

Responsibilities

• Oversee daily vulnerability management operations and reports.
• Coordinate with SOC and Security Assessment teams on vulnerability scanning.
• Plan, execute, monitor, and close vulnerability projects and tasks.
• Configure and schedule patch and secure configuration scans.
• Maintain scan assets, plugins, STIGs, CIS benchmarks, and credentials.
• Analyze scan results and document vulnerabilities and remediation actions.
• Provide remediation guidance and validate findings with artifacts.
• Prepare and communicate vulnerability management status reports.

Skills

Security certifications

Vulnerability assessment

Leadership

Communication

Self-starter

Education

Bachelor's degree in Computer Science or related

Tools

Tenable Security Center

Nessus Scanners

Tenable.io

Web Inspect

DB Protect

RSA Archer

ServiceNow GRC

Job description

DMI is seeking a Vulnerability Management Analyst to lead the vulnerability management program for a State‑level IT function. The role combines hands‑on engineering with project leadership to plan, implement, and close remediation tasks, including patch audits and reporting to stakeholders.

The ideal candidate has RMF, Tenable products, and GRC experience and can operate autonomously or within a team while communicating clearly with Security Operations and IT teams.