Vulnerability Assessment & RMF Compliance Analyst

ShorePoint; Albuquerque (NM); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

PTO 144 hours

Holidays 11

Health insurance

401k

Education benefits

Certifications reimbursement

Job summary

ShorePoint seeks a detail-oriented Vulnerability Assessment Analyst to identify, assess, and track vulnerabilities across IT and OT assets in support of federal cybersecurity compliance. You will work with RMF teams to ensure secure mission operations in a fast-growing environment.

The role emphasizes risk assessment methodologies, vulnerability management, and collaboration with engineering and risk stakeholders to reduce exposure while delivering thorough reporting for federal contracts.

Qualifications

• Bachelor’s degree from an accredited university in a related field.
• 5+ years of relevant work experience.
• U.S. citizen eligible to obtain and maintain a security clearance.
• Experience in vulnerability management, risk assessment and remediation tracking.

Responsibilities

• Conduct vulnerability assessments and evaluate control effectiveness.
• Assist in risk assessment methodologies aligned with federal standards.
• Manage vulnerability data and scanning results for reporting.
• Support continuous monitoring and RMF-related activities.
• Coordinate with engineering and RMF teams to remediate gaps.
• Contribute data toward vulnerability metrics.

Skills

Vulnerability management

Risk assessment

Vulnerability scanning

Security control evaluation

Federal compliance (ATO) knowledge

Analytical problem solving

Documentation of findings

Stakeholder collaboration

Education

Bachelor’s degree in related field

Job description

ShorePoint seeks a detail-oriented Vulnerability Assessment Analyst to identify, assess, and track vulnerabilities across IT and OT assets in support of federal cybersecurity compliance. You will work with RMF teams to ensure secure mission operations in a fast-growing environment.

The role emphasizes risk assessment methodologies, vulnerability management, and collaboration with engineering and risk stakeholders to reduce exposure while delivering thorough reporting for federal contracts.