Vulnerability Management Analyst

Abacus-Technolog; Lincoln (MA); On-site; USD 85,000 - 120,000; Full time

Job summary

Abacus Technology Corporation is a Federal government contractor delivering IT services to DoD and civil/IC customers. We are seeking a Vulnerability Management Specialist to identify, track, and remediate vulnerabilities across Windows environments, coordinating with system owners and IT teams.

You will automate configuration tasks with PowerShell, support RMF/STIG compliance, and prepare leadership-ready dashboards and reports. Must be a US citizen with a current Secret clearance.

Qualifications

• 2+ years in vulnerability/patch management in DoD or enterprise.
• Security+ CE certification current.
• Experience with Windows 10/11 and Windows Server.
• Familiar with RMF, STIGs, NIST 800-53.
• Experience with ACAS, Nessus, Tanium, Tenable, Qualys.
• PowerShell scripting for automation.

Responsibilities

• Perform vulnerability scanning and remediation tracking using ACAS/Tanium.
• Analyze scans and coordinate patching with admins and owners.
• Develop PowerShell scripts to automate configuration and patch tasks.
• Manage AD/Windows Server baselines and GPOs.
• Coordinate vulnerability closure via ServiceNow.
• Prepare status reports on vulnerabilities, patch compliance, risk posture.
• Support RMF and STIG compliance with Cybersecurity teams.
• Communicate findings to technical and non-technical stakeholders.
• Assist HBSS/MECM for endpoint patches as needed.

Skills

Vulnerability management

Patch management

PowerShell scripting

Active Directory & Group Policy

Security governance RMF

Stakeholder communication

Dashboard reporting

Education

Associate’s degree in related field

Security+ CE certification

Tools

ACAS

Tenable

Nessus

Tanium

Qualys

ServiceNow

Power BI

Job description

Abacus Technology Corporation is a Federal government contractor and provider of enterprise information technology (IT) services and solutions. For nearly 40 years, we’ve developed effective partnerships with government and industry to tackle business challenges and pressures for Federal Defense, Civilian, and Intelligence customers. Abacus maintains core competencies in: IT Infrastructure Support, Network Operations and Maintenance, Communication Solutions, Systems Engineering and Integration, Cyber Security / Information Assurance, Application Development, Program Management, and Business Transformation.

Job Description

• Perform vulnerability scanning, assessment, and remediation tracking using ACAS (Nessus/Security Center), ARAD (Tanium), or similar tools.
• Analyze scan data and coordinate patching activities with system administrators and functional owners.
• Develop and maintain PowerShell scripts to automate configuration management and patch deployment tasks.
• Work in Active Directory and Windows Server environments to implement secure baselines and GPO configurations.
• Coordinate vulnerability closure through ServiceNow or equivalent ticketing systems, ensuring timely and accurate updates.
• Prepare tracking and status reports on vulnerability status, patch compliance, and risk posture for leadership and compliance reviews.
• Collaborate with Cybersecurity, IT Operations, and Compliance teams to support RMF and STIG compliance requirements.
• Proactively communicate findings, remediation guidance, tracking insights, and risk impacts to both technical and non-technical stakeholders.
• Support HBSS/MECM and related endpoint management tools as required to deploy patches or security updates.

Qualifications

2+ years of experience in vulnerability management, patch management, or system administration within a DoD or enterprise environment. Associate’s degree in a related field. Must be Security+ CE certified. Strong understanding of Windows OS (Windows 10/11) and Windows Server environments. Experience with vulnerability management tools (e.g., ACAS, Tenable, Nessus, Tanium, Qualys). Demonstrated experience with patch management and configuration management processes. Knowledge of PowerShell scripting for automation and remediation workflows. Knowledge of Active Directory, Group Policy, and system hardening techniques. Familiar with enterprise ITSM platforms (ServiceNow preferred). Experience supporting DoD cybersecurity programs and compliance frameworks (RMF, STIGs, DISA, NIST 800-53) desired. Familiarity with automation/orchestration platforms for patch and configuration management preferred. Experience creating dashboards and reports for leadership visibility using tools such as Power BI, Tanium, and ServiceNow Performance Analytics preferred. Excellent written and verbal communication skills, including the ability to convey technical details clearly. Proven ability to manage competing priorities in a mission-focused environment. Must be a US Citizen and hold a current Secret clearance.

Applicants selected will be subject to a U.S. government security investigation and must meet eligibility requirements for access to classified information.

Additional Information

All your information will be kept confidential according to EEO guidelines.