Vulnerability Management Analyst

DataStaff, Inc.; Richmond (VA); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401k after 6 months

Paid vacation

Job summary

DataStaff, Inc in Richmond, VA seeks a Vulnerability Management Analyst for a long-term contract. The role is hybrid—2–3 days onsite—with responsibilities spanning vulnerability assessment, remediation support, tool maintenance, and reporting to improve enterprise visibility into cyber risks.

The candidate should have extensive information security experience, expertise in vulnerability management, and strong analytical and communication skills.

Qualifications

• 5+ years information security experience.
• 3+ years vulnerability management experience.
• Experience troubleshooting vulnerability scan tools and configurations.
• Experience with automation supporting vulnerability assessment operations.
• Experience with ISVM scans and compliance activities.
• Experience with API discovery and security scanning.
• Proficiency with Power BI and SharePoint.
• Excellent analytical and problem-solving abilities.
• Strong verbal and written communication skills.
• Ability to work independently or in a team.

Responsibilities

• Perform vulnerability assessments and support scanning across operating systems, databases, web applications, and enterprise infrastructure.
• Analyze vulnerabilities and support remediation recommendations.
• Support cloud compliance scans and assessment activities.
• Help troubleshoot scanning issues and maintain tools, consoles, and configurations.
• Support automated and scheduled scanning, including planning, execution, and reporting.
• Assist incident investigations with emergency vulnerability scanning.
• Create and maintain scan reports, data feeds, and user access for assessment tools.
• Coordinate API discovery/scanning and integrate data into third‑party tools.
• Coordinate with Security Operations to support tool operations and vulnerability management activities.

Skills

InfoSec experience

Vulnerability mgmt

Automation

ISVM compliance

API discovery

Power BI

Analytical skills

Verbal & written

Independent worker

Team collaboration

Tools

SharePoint

Job description

DataStaff, Inc. is in need of a Vulnerability Management Analyst for a long-term contract opportunity with one of our direct clients in Richmond, VA.

*This position is hybrid; 2-3 days will be onsite

Job Description:

Our client is seeking a Risk and Vulnerability Analyst to support vulnerability assessment and risk analysis activities. This role is responsible for conducting vulnerability scanning and analysis, supporting remediation efforts, supporting scanning operations, and helping improve enterprise visibility into security weaknesses and cyber risks.

Responsibilities:

• Perform vulnerability assessments and assist with security scanning across operating systems, databases, web applications, and enterprise infrastructure
• Analyze vulnerabilities and support development of remediation recommendations
• Support cloud compliance scans and assessment activities
• Help troubleshoot scanning issues and support maintenance of vulnerability scanning tools, consoles, and configurations
• Support automated and scheduled scanning activities, including scan planning, execution, and reporting
• Support ad hoc or emergency vulnerability scanning in support of incident investigation and response activities
• Create and maintain scan reports, data feeds, scan policies, repositories, and user access/roles for assessment tools
• Support API discovery and scanning, and integration of assessment data into third-party tools
• Coordinate with the Security Operations team to support tool operations, testing, and vulnerability management activities

Required Skills:

• 5 Years - Information Security-related experience
• 3 Years - Software Vulnerability Management-related experience
• 3 Years - Experience troubleshooting vulnerability scan tools and scan configurations
• 3 Years - Experience with automation supporting vulnerability assessment operations
• 3 Years - Experience supporting Information System Vulnerability Management (ISVM) scans and compliance activities
• 3 Years - Experience with API discovery and security scanning
• 5 Years - Experience and proficiency with Microsoft, SharePoint and Power BI
• 5 Years - Proven analytical and problem-solving abilities
• 5 Years - Excellent verbal and written communication skills
• 5 Years - Ability to work independently with minimal direction and as a team
• 5 Years - Highly motivated and self-directed

This position is available on a corp-to-corp basis or as a W2 position with a competitive benefits package. DataStaff, Inc. offers medical, dental and vision coverage options as well as paid vacation, sick and holiday leave. As many of our opportunities are long-term, we also have a 401k program available for employees after 6 months.