Vulnerability Management Analyst

Astyra Corporation; Richmond (VA); Hybrid; USD 85,000 - 120,000; Full time

Job summary

Astyra Corporation in Richmond, VA seeks a Vulnerability Management Analyst for a 1-year contract. The role focuses on vulnerability assessments, remediation support, and security scanning across enterprise systems. Hybrid on-site 2-3 days/week.

The candidate will drive remediation efforts, support cloud scans, and contribute to enterprise visibility of cyber risks with strong analytical and communication skills, five years of relevant experience, and the ability to work independently.

Qualifications

• 5+ years Information Security-related experience.
• 3+ years Software Vulnerability Management experience.
• 3+ years experience troubleshooting vulnerability scan tools and configurations.
• 3+ years experience automation supporting vulnerability assessment operations.
• 3+ years experience ISVM scans and compliance activities.
• 3+ years API discovery and security scanning.
• 5+ years experience with SharePoint and Power BI.
• 5+ years proven analytical and problem-solving abilities.
• 5+ years excellent verbal and written communication skills.
• 5+ years ability to work independently and as part of a team.
• 5+ years highly motivated and self-directed.

Responsibilities

• Perform vulnerability assessments and assist with security scanning across OS, databases, web apps, and enterprise infra.
• Analyze vulnerabilities and support remediation recommendations.
• Support cloud compliance scans and assessments.
• Troubleshoot scanning issues and maintain vulnerability scanning tools configs.
• Support automated and scheduled scanning, including planning, execution, and reporting.
• Support ad hoc vulnerability scanning for incidents.
• Create and maintain scan reports, data feeds, policies, repositories, and user access for assessment tools.
• Support API discovery and data integration into third-party tools.
• Coordinate with Security Operations to support tool operations testing and vulnerability management.

Skills

Vulnerability management

Security scanning

Automation

ISVM scans

API discovery and security scanning

SharePoint

Power BI

Analytical thinking

Problem solving

Communication skills

Independent work

Self-directed

Tools

SharePoint

Power BI

Job description

Vulnerability Management Analyst

*This is a 1-year contract position

*Hybrid (on-site 2-3 days/week) - Local to Richmond, VA only, please

Description

The organization is seeking a Risk and Vulnerability Analyst to support vulnerability assessment and risk analysis activities. This role is responsible for conducting vulnerability scanning and analysis, supporting remediation efforts, supporting scanning operations, and helping improve enterprise visibility into security weaknesses and cyber risks.

Responsibilities

• Perform vulnerability assessments and assist with security scanning across operating systems, databases, web applications, and enterprise infrastructure
• Analyze vulnerabilities and support development of remediation recommendations
• Support cloud compliance scans and assessment activities
• Help troubleshoot scanning issues and support maintenance of vulnerability scanning tools consoles and configurations
• Support automated and scheduled scanning activities, including scan planning, execution, and reporting
• Support ad hoc or emergency vulnerability scanning in support of incident investigation and response activities
• Create and maintain scan reports, data feeds, scan policies, repositories, and user access/roles for assessment tools
• Support API discovery and scanning and integration of assessment data into third-party tools
• Coordinate with Security Operations team to support tool operations testing and vulnerability management activities

Required Skills/Knowledge/Experience:

• Information Security-related experience, Required 5 Years
• Software Vulnerability Management-related experience, Required 3 Years
• Experience troubleshooting vulnerability scan tools and scan configurations, Required 3 Years
• Experience with automation supporting vulnerability assessment operations, Required 3 Years
• Experience supporting Information System Vulnerability Management (ISVM) scans and compliance activities, Required 3 Years
• Experience with API discovery and security scanning, Required 3 Years
• Experience and proficiency with Microsoft SharePoint and Power BI, Required 5 Years
• Proven analytical and problem-solving abilities, Required 5 Years
• Excellent verbal and written communication skills, Required 5 Years
• Ability to work independently with minimal direction and as a team, Required 5 Years
• Highly motivated and self-directed, Required 5 Years