Vulnerability Management Analyst

Centuria; Lincoln (MA); On-site; USD 90,000 - 120,000; Full time

Job summary

Centuria is seeking a Vulnerability Management Analyst to join the BLITS 3.0 program at Hanscom AFB, MA, supporting the 66 ABG. The role focuses on identifying, analyzing, and remediating vulnerabilities across enterprise systems, with automation-driven patch management using ACAS, ARAD/Tanium, and PowerShell scripting.

The candidate will work in Windows Server environments, coordinate patching with admins, and contribute to RMF/STIG compliance; strong communication skills are essential for

Qualifications

• Strong understanding of Windows OS (Windows 10/11) and Windows Server environments.
• Experience with vulnerability management tools (ACAS, Tenable, Nessus, Tanium, Qualys).
• Experience with patch management and configuration management processes.
• Intermediate to advanced PowerShell scripting for automation and remediation workflows.
• Working knowledge of Active Directory, Group Policy, and system hardening techniques.
• Familiarity with enterprise ITSM platforms (ServiceNow preferred).
• Excellent written and verbal communication skills, including prioritization in a mission-focused environment.

Responsibilities

• Perform vulnerability scanning, assessment, and remediation tracking using ACAS or Tanium.
• Analyze scan data and coordinate patching with system administrators.
• Develop and maintain PowerShell scripts to automate configuration and patches.
• Work in AD and Windows Server to implement secure baselines and GPOs.
• Coordinate vulnerability closure through ticketing systems like ServiceNow.
• Prepare tracking reports on vulnerability status and risk posture for leadership.
• Collaborate with Cybersecurity, IT Operations, and Compliance teams for RMF/STIGs.
• Communicate findings and remediation guidance to technical and non-technical stakeholders.
• Support HBSS/MECM to deploy patches and security updates.

Skills

PowerShell scripting

Patch management

Vulnerability management

Active Directory

Group Policy

Communication skills

RMF/STIG knowledge

Windows OS proficiency

Threat remediation

Education

Associate's degree in Information Technology or related field

Tools

ACAS

Tanium

Nessus

ServiceNow

HBSS/MECM

Power BI

Job description

Job Title: Vulnerability Management Analyst

Location: Hanscom AFB, MA

Clearance: Secret

Program: BLITS 3.0

Company/ Program Description:

Centuria, a Service-Disabled Veteran-Owned Small Business (SDVOSB), has been delivering IT, Engineering, and Scientific solutions to the Federal Government since 2002. During our two decades of service, we have earned the trust and respect of our government clients for the simple reason that we have great people who are experts in their fields and take pride and ownership in everything they do.

BLITS 3.0 PROGRAM DESCRIPTION:

This role will be to directly support the mission of the 66th Air Base Group (66 ABG) to secure information and information systems; to support mission success through effective and efficient service delivery; and to sustain required infrastructure and capabilities. As one part of the greater Air Force Information Network (AFIN) enterprise, the 66 ABG Communications and Information Division (66 ABG/SC) has responsibilities in two categories (1) direct actions in support of Hanscom Air Force Base (HAFB) and geographically separated units (GSUs); and (2) indirect actions to support the AFIN enterprise. Successful solutions for this requirement are expected to have strengths in four areas: integration, flexibility, AFIN knowledge, and technical expertise.

Position Summary

The Vulnerability Management Analyst will identify, analyze, and remediate vulnerabilities across enterprise systems. This position requires strong technical and communication skills, with a focus on proactive collaboration and automation-driven patch management. The analyst will leverage ACAS, ARAD (Tanium), and PowerShell scripting to maintain system compliance and reduce risk exposure.

Key Responsibilities

• Perform vulnerability scanning, assessment, and remediation tracking using ACAS (Nessus/Security Center), ARAD (Tanium), or similar tools.
• Analyze scan data and coordinate patching activities with system administrators and functional owners.
• Develop and maintain PowerShell scripts to automate configuration management and patch deployment tasks.
• Work in Active Directory and Windows Server environments to implement secure baselines and GPO configurations.
• Coordinate vulnerability closure through ServiceNow or equivalent ticketing systems, ensuring timely and accurate updates.
• Prepare tracking and status reports on vulnerability status, patch compliance, and risk posture for leadership and compliance reviews.
• Collaborate with Cybersecurity, IT Operations, and Compliance teams to support RMF and STIG compliance requirements.
• Proactively communicate findings, remediation guidance, tracking insights, and risk impacts to both technical and non-technical stakeholders.
• Support HBSS/MECM and related endpoint management tools as required to deploy patches or security updates.

Required Skills and Qualifications

• Strong understanding of Windows OS (Windows 10/11) and Windows Server environments.
• Experience with vulnerability management tools (e.g., ACAS, Tenable, Nessus, Tanium, Qualys).
• Demonstrated experience with patch management and configuration management processes.
• Intermediate to advanced PowerShell scripting for automation and remediation workflows.
• Working knowledge of Active Directory, Group Policy, and system hardening techniques.
• Familiarity with enterprise ITSM platforms (ServiceNow preferred).
• Excellent written and verbal communication skills, including the ability to convey technical details clearly.
• Proven ability to manage competing priorities in a mission-focused environment.

Education and Certifications

• Active DoD Secret clearance required.
• CompTIA Security+ CE (or higher certification such as CISSP, CISM)
• Associate's degree in Information Technology or related field; additional experience may substitute for education.
• 2+ years of experience in vulnerability management, patch management, or system administration within a DoD or enterprise environment.

Preferred Qualifications

• Experience supporting DoD cybersecurity programs and compliance frameworks (RMF, STIGs, DISA, NIST 800-53).
• Familiarity with automation/orchestration platforms for patch and configuration management.
• Excel expertise.
• Experience creating dashboards and reports for leadership visibility using tools such as Power BI, Tanium, and ServiceNow Performance Analytics.