Vulnerability Management Analyst

Ampcus Inc; Richmond (VA); Hybrid; USD 75,000 - 110,000; Full time

Job summary

Ampcus Inc. is seeking a Vulnerability Management Analyst in Richmond, VA (hybrid: onsite 2-3 days per week). You will conduct vulnerability assessments, analyze weaknesses, and support remediation and reporting across diverse environments.

The role emphasizes experience with vulnerability scanners, API discovery, and tools such as Microsoft, SharePoint, and Power BI, with a focus on improving enterprise security visibility and risk mitigation.

Qualifications

• InfoSec experience required (5+ years).
• Vulnerability management experience required (3+ years).
• Experience troubleshooting vulnerability scan tools and configurations (3+ years).
• Automation experience supporting vulnerability assessment operations (3+ years).
• Experience with ISVM scans and compliance activities (3+ years).
• Experience with API discovery and security scanning (3+ years).
• Proficiency with Microsoft, SharePoint and Power BI (5+ years).
• Strong analytical and problem-solving abilities (5+ years).
• Excellent verbal and written communication skills (5+ years).
• Ability to work independently with minimal direction and as part of a team (5+ years).
• Highly motivated and self-directed (5+ years).

Responsibilities

• Perform vulnerability assessments and assist with security scanning across operating systems, databases, web applications, and enterprise infrastructure.
• Analyze vulnerabilities and support the development of remediation recommendations.
• Support cloud compliance scans and assessment activities.
• Help troubleshoot scanning issues and support maintenance of vulnerability scanning tools, consoles, and configurations.
• Support automated and scheduled scanning activities, including scan planning, execution, and reporting.
• Support ad hoc or emergency vulnerability scanning in support of incident investigation and response activities.
• Create and maintain scan reports, data feeds, scan policies, repositories, and user access/roles for assessment tools.
• Support API discovery and scanning, and integration of assessment data into third-party tools.
• Coordinate with the Security Operations team to support tool operations, testing, and vulnerability management activities.

Skills

InfoSec experience

Vulnerability management

Troubleshooting scanners

Automation in vulnerability ops

ISVM scans & compliance

API discovery

Microsoft/SharePoint/Power BI

Analytical skills

Communication skills

Independent work

Self-directed

Job description

Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.

Job Title:

Vulnerability Management Analyst

Location(s):

Richmond, VA

(Hybrid: Onsite 2-3 days per week)

Job Summary

The Vulnerability Management Analyst will support vulnerability assessment and risk analysis activities. This role is responsible for conducting vulnerability scanning and analysis, supporting remediation efforts, maintaining scanning operations, and helping improve enterprise visibility into security weaknesses and cyber risks.

• Perform vulnerability assessments and assist with security scanning across operating systems, databases, web applications, and enterprise infrastructure.
• Analyze vulnerabilities and support the development of remediation recommendations.
• Support cloud compliance scans and assessment activities.
• Help troubleshoot scanning issues and support maintenance of vulnerability scanning tools, consoles, and configurations.
• Support automated and scheduled scanning activities, including scan planning, execution, and reporting.
• Support ad hoc or emergency vulnerability scanning in support of incident investigation and response activities.
• Create and maintain scan reports, data feeds, scan policies, repositories, and user access/roles for assessment tools.
• Support API discovery and scanning, and integration of assessment data into third-party tools.
• Coordinate with the Security Operations team to support tool operations, testing, and vulnerability management activities.

Important Information

• Parking is not provided for contractors.
• Submission deadline: Tuesday, October 13 at 4:00 PM EST.

Skills

SkillRequired / DesiredAmountof ExperienceExpertise RatingMoveInformation Security-related experienceRequired5Years Software Vulnerability Management related experienceRequired3Years Experience troubleshooting vulnerability scan tools and scan configurationsRequired3Years Experience with automation supporting vulnerability assessment operationsRequired3Years Experience supporting Information System Vulnerability Management (ISVM) scans and compliance activitiesRequired3Years Experience with API discovery and security scanningRequired3Years Experience and proficiency with Microsoft, SharePoint and Power BIRequired5Years Proven analytical and problem-solving abilities Required5Years Excellent verbal and written communication skillsRequired5Years Ability to work independently with minimal direction and as a teamRequired5Years Highly motivated and self-directedRequired5Years

Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.