Vulnerability Management Analyst

RYAN Consulting Group; United States; On-site; USD 84,000 - 89,000; Full time

Benefits offered by this job

Paid Holidays

Paid Time Off (PTO)

Health, Dental, Vision Coverage

401(k) with Employer Matching

Life Insurance

Job summary

RYAN Consulting Group is seeking a Vulnerability Management Analyst to support the Cybersecurity Center by identifying, assessing, and mitigating cybersecurity risks across DoD systems and assets. You will conduct vulnerability scans, analyze weaknesses, and assist remediation while maintaining procedures and providing metrics.

The role requires an Active Secret clearance, DoD experience, and IAT II/CSSP certifications, with a focus on scanning, reporting, and collaboration across stakeholders.

Qualifications

• Active Secret Clearance
• Experience in a SOC environment
• Experience conducting vulnerability scans
• Experience in a DoD environment
• Knowledge of cyber kill chain
• 5+ years of related experience
• Ability to maintain DoD 8140 / 8570 IAT II certification and CSSP Auditor certifications

Responsibilities

• Identify, analyze, report, remediate, verify vulnerabilities according to DoD directives
• Provide vulnerability metrics and reporting to stakeholders
• Support ISCM and risk management processes with scan data
• Test patches, updates, and hardware configurations; produce baseline reports
• Lead remediation meetings and guide scanning/signature improvements
• Share vulnerability information with DoD and non-DoD partners

Skills

SOC experience

Vulnerability scanning

Cybersecurity

Tools

NIST guidelines

Job description

Location: Onsite

Job Type: W-2

Shift: Mon-Fri first shift

Pay Range: $84,000 - $89,000 exempt

Ryan Consulting Group, Inc. is seeking a Vulnerability Management Analyst to support the Cybersecurity Center's mission of identifying, assessing, and mitigating cybersecurity risks across DoD systems, assets, and agency capabilities. This role is responsible for conducting vulnerability scans, analyzing system and application weaknesses, supporting remediation and mitigation efforts, maintaining vulnerability management procedures, providing metrics and reporting, and collaborating with stakeholders to improve cybersecurity posture in accordance with DoD and NIST directives.

Key Responsibilities:

• Ensure routine action is taken to identify and correct vulnerabilities according to the following phases. Vulnerabilities include Information Assurance Vulnerability Management (IAVM) as well as vulnerabilities not be addressed through IAVM directives but affect DoD owned and managed information systems (ISs) and devices:

• Identify
• Analysis
• Report
• Remediation/Mitigation
• Verification
• Post Analysis / Process Improvement

• Provide metrics tracking the following with regards to performance and mission success: mean time to patch; POA&M and Risk Acceptance staffing; and non-compliance trending.
• Support the risk assessment process, Information Security Continuous Monitoring (ISCM) program and Agency overall risk management strategy by providing vulnerability scan information to the Risk Management Group, or relevant entity, in support of assessing and authorizing the environments;
• Conduct testing of IS software patches, updates, upgrades, and hardware device configurations. Provide information system baseline scan reports.
• Provide enterprise, discovery, and compliance Vulnerability Scan report.
• Conduct vulnerability scans requests (i.e. SR, IR) and provide analysis results.
• Create and maintain consistent, repeatable, quality driven, measurable, and comprehensive Vulnerability
• Management procedures. Establish common standards for directive reporting and compliance as it relates to vulnerability management.
• Host vulnerability remediation/mitigation meetings to review remediation actions with stakeholders; providing SME level guidance on scanning signatures and detection capabilities; Validate and monitor corrective actions/remediation of vulnerabilities on information systems.
• Participate in Cyber Situational Awareness Brief (SAB) and provide: health status of required scans and scanning tools across all environments to include scanning completed by other entities such as DISA; and latest vulnerability status.
• Collaborate with DoD and/or Non-DoD organizations to actively share vulnerability information in order to shape cyber mission space for vulnerability mitigation.

• ACTIVE Secret Clearance
• Experience working in a SOC environment.
• Experience conducting vulnerability scans.
• Experience working in a DoD environment.
• Knowledge of cyber kill chain.
• At least 5 years of related experience.
• Active Secret security clearance.
• Ability to maintain DoD 8140 / 8570 IAT II certification and CSSP Auditor certifications.

DoD IAT II required certification/s (one of the following):

• CCNA-Security
• CySA+ (CSA+)
• GICSP
• GSEC
• Security+ CE
• CND
• SSCP

AND

DoD CSSP Auditor required certification/s (one of the following):

• CEH
• CySA+ **
• CISA
• GSNA
• CFR
• PenTest

Benefits at RYAN

RYAN offers a comprehensive, competitive benefits package designed to support the well-being of our employees and their families. Some benefits may vary by contract.

• Paid Holidays (varies by contract)
• Paid Time Off (PTO)
• Bereavement, Military, and Parental Leave
• 401(k) or Roth Retirement Plan with Employer Matching
• Medical, Dental, and Vision Coverage
• Health Savings Account (with employer contribution)
• Group Term Life Insurance
• Pet Insurance
• Employee Discount Perks
• Voluntary Life Insurance
• Short- and Long-Term Disability
• Accident, Cancer, and Critical Illness Insurance

Equal Employment Opportunity (EEO) Statement:

Ryan Consulting Group, Inc. is an equal opportunity employer. We are dedicated to ensuring equal employment opportunities in all aspects of employment, including recruitment, hiring, promotion, training, compensation, benefits, and termination. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other characteristic protected by applicable law.

Ryan Consulting Group, Inc. is also committed to complying with the Americans with Disabilities Act (ADA) and providing reasonable accommodations for qualified individuals with disabilities. If you need assistance or accommodation due to a disability in the application process, please contact [e-mail].

Drug-Free Workplace Statement:

Ryan Consulting Group, Inc. is committed to maintaining a drug-free workplace, in compliance with the Drug-Free Workplace Act of 1988, which is a requirement for all federal contractors. We recognize the impact that drug and alcohol abuse can have on the safety, health, and productivity of our workforce, and we are dedicated to providing a work environment that is free from illegal drugs and alcohol. All employment offers are conditional upon successfully passing a drug screening.

Pay Transparency Statement:

Ryan Consulting Group, Inc. complies with all relevant pay transparency laws in each state and jurisdiction where we operate. This includes providing salary ranges and pay data in compliance with state or local regulations where applicable. We also ensure that applicants and employees in relevant states are informed of their right to inquire about pay information as required by state or local laws. Employees and applicants in states where pay transparency laws are in effect can expect to be provided with salary information upon request during the hiring process.

Pay Range: $84,000 - $89,000