Vulnerability Assessment & RMF Analyst

Amyx, Inc.; Springfield (VA); On-site; USD 95,000 - 140,000; Full time

Benefits offered by this job

Medical, Dental & Vision

401(k) with matching

Health Savings Account (HSA)

Roth option

Professional Development Reimbursement

Paid Time Off (PTO)

11 Holidays

Disability insurance

Life Insurance

Job summary

Amyx, Inc. is seeking a Vulnerability Assessment Analyst to join our Cybersecurity Vulnerability Management team in Springfield, VA. This on-site role supports RMF implementation and vulnerability remediation in client systems, requiring TS/SCI eligibility and related certifications.

The candidate will perform vulnerability scans, validate findings, and coordinate with system owners to resolve issues, ensuring compliance with policy and security controls. Excellent communication is essential.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• Experience with vulnerability management and related certifications is acceptable in lieu of a degree.
• Knowledge of STIGs, RMF, and cyber threat concepts is required.
• Ability to collaborate with IT asset owners to develop actionable remediation plans.

Responsibilities

• Perform assessments of systems and networks within the environment and identify deviations from configurations and policy.
• Review, promulgate, and track Cyber Task Orders; coordinate with system owners to resolve findings.
• Develop measures of effectiveness for defense-in-depth architectures against known vulnerabilities.
• Identify systemic security issues through analysis of vulnerability data and STIG data.
• Prioritize vulnerability-reduction activities based on threat data and policy requirements.
• Conduct vulnerability scans, validate findings, coordinate remediation tracking, and verify closure.
• Analyze web application vulnerability assessments and recommend remediation actions.
• Apply cybersecurity and privacy principles to organizational requirements.

Skills

TS/SCI eligibility

Security+ / equivalent certs

Nessus / ACAS / Tenable

Networking concepts

RMF knowledge

Threat & vulnerability awareness

Strong communication

Education

Bachelor's degree in CS/Cybersecurity/IT or related field

Equivalent experience with certifications (Security+, PenTest+, etc.)

Tools

Nessus

ACAS

Tenable

RMF Documentation / RIG

Job description

Amyx, Inc. is seeking a Vulnerability Assessment Analyst to join our Cybersecurity Vulnerability Management team in Springfield, VA. This on-site role supports RMF implementation and vulnerability remediation in client systems, requiring TS/SCI eligibility and related certifications.

The candidate will perform vulnerability scans, validate findings, and coordinate with system owners to resolve issues, ensuring compliance with policy and security controls. Excellent communication is essential.