Vulnerability and Exposures Analyst

Xtreme Solutions Inc; Atlanta (GA); On-site; USD 135,000 - 170,000; Full time

Job summary

Xtreme Solutions, Inc. is seeking an experienced senior security leader to own the exposure-management strategy and drive program-level metrics. The role requires governing exception review processes and delivering continuous improvement across portfolios.

You will lead root-cause analysis for recurring exposure classes and advise stakeholders on remediation prioritization, ensuring alignment with client objectives and enterprise risk posture.

Qualifications

• Bachelor's degree required; Master's a plus.
• 7+ years in vulnerability/exposure management.
• CISSP required; GIAC GPEN or OSCP preferred.

Responsibilities

• Define exposure-management strategy and scanning cadence.
• Govern risk-acceptance and exception review process.
• Develop and report program-level vulnerability metrics.
• Lead root-cause analysis for recurring exposure classes.
• Advise stakeholders on remediation prioritization at the portfolio level.

Skills

Exposure management

Vulnerability management

Risk analysis

Governance

Education

Bachelor's Degree

Master's Degree

Tools

CISSP

GPEN

OSCP

Job description

Description

Owns exposure-management strategy, governs exception review processes, and drives program-level metrics and continuous improvement.

Description

Owns exposure-management strategy, governs exception review processes, and drives program-level metrics and continuous improvement.

Key Responsibilities

• Define exposure-management strategy and scanning cadence
• Govern the risk-acceptance and exception review process
• Develop and report program-level vulnerability metrics
• Lead root-cause analysis for recurring exposure classes
• Advise stakeholders on remediation prioritization at the portfolio level

Requirements

Minimum Qualifications

• Education: Bachelor's Degree (Master's a plus)
• Experience: 7+ years in vulnerability/exposure management
• Certifications: CISSP (required), GIAC GPEN or OSCP (preferred)

About Xsi

Xtreme Solutions, Inc. is committed to supporting a variety of programs. Our broad range of IT expertise addresses our clients’ needs by providing industry leading, state-of-the-art information technology and cyber security services and solutions.

We focus on delivering business solutions that exceed our customers’ vision, mission, and long-term goals while focusing on emerging trends and information technologies.

Equal Employment Opportunity

Xtreme Solutions, Inc. is an Equal Opportunity Employer. XSI does not discriminate in employment on the basis of race, color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, age, disability, genetic information, veteran status, or any other status protected by applicable federal, state, and local law. All qualified applicants will receive consideration for employment without regard to these protected characteristics.

Contingent Upon Contract Award

Every position described in this document is contingent upon Xtreme Solutions, Inc.'s award of Contract BPM057598 (Statewide Cybersecurity Resources, State of Maryland Department of General Services), and the subsequent issuance of a Work Order requiring the applicable labor category. No offer of employment, start date, or compensation commitment will be extended prior to Contract award and Work Order issuance. Candidates will be advised of contingent status throughout the recruiting and screening process.