Vulnerability Management Analyst

Mbi Llc; Richmond (VA); Hybrid; USD 90,000 - 130,000; Full time

Job summary

The State Corporation Commission seeks a Risk and Vulnerability Analyst to support vulnerability assessment and risk analysis activities. You will perform vulnerability assessments across OS, databases, and enterprise infrastructure, analyze findings, and support remediation efforts.

Responsibilities include scanning operations, remediation gap analysis, cloud compliance scans, and maintenance of assessment tools. Strong collaboration with Security Operations is required.

Qualifications

• Information Security-related experience required.
• Software Vulnerability Management related experience required.
• Experience troubleshooting vulnerability scan tools and configurations required.
• Experience with automation supporting vulnerability assessment operations required.
• Experience supporting ISVM scans and compliance activities required.
• Experience with API discovery and security scanning required.
• Experience with Microsoft, SharePoint and Power BI required.
• Proven analytical and problem-solving abilities required.
• Excellent verbal and written communication skills required.
• Ability to work independently with minimal direction and as a team required.
• Highly motivated and self-directed required.

Responsibilities

• Perform vulnerability assessments and assist security scanning across OS, databases, web apps, and infra.
• Analyze vulnerabilities and support remediation recommendations.
• Support cloud compliance scans and assessment activities.
• Troubleshoot scanning issues and maintain vulnerability tools, consoles, configurations.
• Support automated and scheduled scanning, including plan, execute, and report.
• Support ad hoc scanning for incident investigation and response.
• Create and maintain scan reports, data feeds, policies, repositories, and access controls.
• Support API discovery and scanning and integrate assessment data into third-party tools.
• Coordinate with SCC Security Operations to support tool operations and vulnerability management.

Skills

Information Security

Software Vulnerability Management

Vulnerability scanning troubleshooting

Automation in vulnerability assessment

ISVM scans & compliance

API discovery & security scanning

Microsoft SharePoint Power BI

Analytical/problem solving

Verbal & written communication

Independent & team work

Self-motivated & self-directed

Tools

Microsoft

SharePoint

Power BI

Job description

- The State Corporation Commission (SCC) is seeking a Risk and Vulnerability Analyst to support vulnerability assessment and risk analysis activities at the SCC.

- This role is responsible for conducting vulnerability scanning and analysis, supporting remediation efforts, supporting scanning operations, and helping improve enterprise visibility into security weaknesses and cyber risks.

Responsibilities Include:

- Perform vulnerability assessments and assist security scanning across operating systems, databases, web applications, and enterprise infrastructure

- Analyze vulnerabilities and support development of remediation recommendations

- Support cloud compliance scans and assessment activities

- Help troubleshoot scanning issues and support maintenance of vulnerability scanning tools, consoles, and configurations

- Support automated and scheduled scanning activities, including scan planning, execution, and reporting

- Support ad hoc or emergency vulnerability scanning in support of incident investigation and response activities

- Create and maintain scan reports, data feeds, scan policies, repositories, and user access/roles for assessment tools

- Support API discovery and scanning, and integration of assessment data into third-party tools

- Coordinate with SCC Security Operations team to support tool operations, testing, and vulnerability management activities.

Fill the skill matrix below:

Skill

Amount

Candidate's No. of years of experience

Information Security-related experience

Required

5

Software Vulnerability Management related experience

Required

3

Experience troubleshooting vulnerability scan tools and scan configurations

Required

3

Experience with automation supporting vulnerability assessment operations

Required

3

Experience supporting Information System Vulnerability Management (ISVM) scans and compliance activities

Required

3

Experience with API discovery and security scanning

Required

3

Experience and proficiency with Microsoft, SharePoint and Power BI

Required

5

Proven analytical and problem-solving abilities

Required

5

Excellent verbal and written communication skills

Required

5

Ability to work independently with minimal direction and as a team

Required

5

Highly motivated and self-directed

Required

5