Vulnerability Management Analyst

Sarela Technology Solutions; Columbus (OH); On-site; USD 90,000 - 110,000; Full time

Benefits offered by this job

401(k)

401(k) matching

Dental insurance

Health insurance

Paid time off

Profit sharing

Training & development

Tuition assistance

Vision insurance

Job summary

SarelaTech in Columbus, Ohio, seeks an experienced Vulnerability Management Analyst (OS/Infrastructure) to support a DoW cybersecurity mission. You will identify vulnerabilities across OS, infrastructure, apps, and databases and coordinate remediation with stakeholders.

The role requires DoD 8570/8140 IAT Level II certification and an active DoD Secret clearance, with focus on DISA STIGs and IAVM processes to ensure compliance.

Qualifications

• Five years of relevant experience.
• Hands-on experience with vulnerability scanners.
• Understanding of cybersecurity vulnerabilities and remediation techniques.
• Experience analyzing vulnerabilities and risk across OS, networks, apps, databases, or other components.
• Familiarity with DISA STIGs.
• Familiarity with DoD vulnerability management and IAVM processes.

Responsibilities

• Identify vulnerabilities and assess risk across operating systems, infrastructure, applications, databases, and other information system components.
• Coordinate remediation activities and prioritize remediation efforts based on risk.
• Recommend actions to remediate vulnerabilities and mitigate risk, and validate remediation.
• Support implementation of DISA STIGs and DoD IAVM program.
• Track and report security and compliance issues and coordinate with system admins and stakeholders.

Skills

Vulnerability scanning

Risk assessment

DISA STIGs

DoD IAVM processes

DoD 8570/8140 IAT requirements

Tools

ACAS

Job description

Benefits

• 401(k)
• 401(k) matching
• Dental insurance
• Health insurance
• Paid time off
• Profit sharing
• Training & development
• Tuition assistance
• Vision insurance

SarelaTech is seeking an experienced Vulnerability Management Analyst (OS/Infrastructure) to support a Department of War (DoW) cybersecurity mission in Columbus, Ohio. This position will provide vulnerability management support for assigned information systems and computer networks, identifying vulnerabilities and assessing risk across operating systems, infrastructure, applications, databases, and other information system components.

The Vulnerability Management Analyst will engage with stakeholders and mission partners to facilitate vulnerability discovery through manual review and vulnerability scanning tools. The analyst will coordinate remediation activities, prioritize remediation efforts based on risk, recommend appropriate actions to remediate vulnerabilities and mitigate risk, and validate completed remediation actions.

The position will support implementation of required security configurations, including Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs), and support compliance with the DoD Information Assurance Vulnerability Management (IAVM) program. The analyst will track and report security and compliance issues and ensure compliance with DLA and DoD information security policy.

The position may also support ACAS vulnerability scanning and reporting, cyber hygiene reporting, vulnerability remediation prioritization, and coordination with system administrators, Program Managers, ISSMs, and other cybersecurity stakeholders.

Required Qualifications

• Five (5) years of relevant experience.
• Hands-on experience working with vulnerability scanners.
• Understanding of cybersecurity vulnerabilities and appropriate remediation techniques.
• Experience analyzing vulnerabilities and risk across operating systems, networks, applications, databases, or other information system components.
• Familiarity with DISA Security Technical Implementation Guides (STIGs).
• Familiarity with DoD vulnerability management and IAVM processes.

Certification

Must possess a current certification meeting DoD 8570/8140 IAT Level II requirements, such as:

• CompTIA Security+
• GIAC Security Essentials (GSEC)
• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Forensic Analyst (GCFA)
• GIAC Certified Enterprise Defender (GCED)
• Systems Security Certified Practitioner (SSCP)
• Certified Network Defender (CND)
• Or an equivalent certification meeting DoD 8570/8140 IAT Level II requirements.

Security Clearance

• Active DoD Secret security clearance.