Strategic Vulnerability Risk Advisor for City Agencies

Cleared2Hire | The GovTech Talent Platform; New York (NY); On-site; USD 120,000 - 180,000; Full time

Job summary

Cleared2Hire | The GovTech Talent Platform seeks an experienced Vulnerability Management Risk Advisor to strengthen the cybersecurity posture of New York City agencies. You’ll analyze complex vulnerability data, evaluate risk, and help stakeholders prioritize remediation by exploitability, asset exposure and business impact.

You will advise agency IT teams, monitor threats, track exposure trends, and prepare actionable reports for technical and non-technical stakeholders.

Qualifications

• 5+ years of hands-on experience in vulnerability management or security analysis
• Experience with Rapid7 InsightVM and similar tools
• Strong knowledge of CVEs, threat intel and risk prioritization
• Ability to translate complex data into remediation actions
• Excellent written and verbal communication
• Experience creating technical documentation and SOPs
• Proactive, self-directed in fast-paced environments

Responsibilities

• Analyze vulnerability data from security platforms and assess risk
• Advise agencies on remediation priorities and risk-reduction strategies
• Prepare actionable reports for technical and non-technical stakeholders
• Create SOPs, process documentation and knowledge-base articles
• Maintain vulnerability assessment and remediation records
• Support compliance reporting and audit requirements
• Collaborate with other analysts to improve processes

Skills

Vulnerability management

Cybersecurity operations

Security analysis

Communication

Documentation

SOP creation

Remediation prioritization

Tools

Rapid7 InsightVM

CrowdStrike Falcon

Shodan

Prisma Cloud

Job description

Cleared2Hire | The GovTech Talent Platform seeks an experienced Vulnerability Management Risk Advisor to strengthen the cybersecurity posture of New York City agencies. You’ll analyze complex vulnerability data, evaluate risk, and help stakeholders prioritize remediation by exploitability, asset exposure and business impact.

You will advise agency IT teams, monitor threats, track exposure trends, and prepare actionable reports for technical and non-technical stakeholders.