Vulnerability Management Analyst (813431)

Zohorecruit; Richmond (VA); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Tri-Force Consulting Services, Inc. is seeking a Vulnerability Management Analyst for a 12-month contract in the Richmond, VA area. The role supports vulnerability assessment and risk analysis at the State Corporation Commission, with a hybrid onsite/remote schedule (3 days on-site, 2 days remote).

The candidate will perform vulnerability assessments, support remediation efforts, and help improve enterprise visibility into cyber risks using tools like Microsoft, SharePoint, and Power BI.

Qualifications

• 5+ years of information security or vulnerability management experience.
• Experience with vulnerability scanning tools and configurations.
• Experience with automation to support vulnerability assessment operations.
• Experience with ISVM scans and compliance activities.
• Experience with API discovery and security scanning.
• Proficiency in Microsoft, SharePoint and Power BI tools.
• Strong analytical and problem-solving abilities.
• Excellent verbal and written communication skills.
• Ability to work independently and in a team.

Responsibilities

• Perform vulnerability assessments across OS, databases, web apps, and enterprise infrastructure.
• Analyse vulnerabilities and support remediation recommendations.
• Support cloud compliance scans and assessments.
• Troubleshoot scanning issues and maintain tools/configs.
• Support automated and scheduled scanning, planning, and reporting.
• Assist with incident investigations via vulnerability scanning.
• Create and maintain scan reports, data feeds, and access controls.
• Coordinate with SCC Security Operations and integrate data with third-party tools.

Skills

Information security experience

Vulnerability management

Vulnerability scan tooling

Automation in vulnerability ops

ISVM scans & compliance

API discovery & security scanning

Microsoft, SharePoint & Power BI

Analytical & problem solving

Verbal & written communication

Independent & team work

Self-motivated & self-directed

Tools

Microsoft Suite

SharePoint

Power BI

Job description

Vulnerability Management Analyst (813431)

Contract | Tri-Force Consulting Services, Inc. | United States

Posted On 10/07/2026

Job Information

IT Services

Work Experience 5+ years

NA

City Richmond

State/Province Virginia

23219

Job Description

Job Title: Vulnerability Management Analyst (813431)

Duration: 12 months

Note: Hybrid Position 3 days/week Onsite / 2-days Remote

Job Description

• The State Corporation Commission (SCC) is seeking a Risk and Vulnerability Analyst to support vulnerability assessment and risk analysis activities at the SCC. This role is responsible for conducting vulnerability scanning and analysis, supporting remediation efforts, supporting scanning operations, and helping improve enterprise visibility into security weaknesses and cyber risks.

Responsibilities Include:

• Perform vulnerability assessments and help security scanning across operating systems, databases, web applications, and enterprise infrastructure
• Analyse vulnerabilities and support development of remediation recommendations
• Support cloud compliance scans and assessment activities
• Help troubleshoot scanning issues and support maintenance of vulnerability scanning tools, consoles, and configurations
• Support automated and scheduled scanning activities, including scan planning, execution, and reporting
• Support ad hoc or emergency vulnerability scanning in support of incident investigation and response activities
• Create and maintain scan reports, data feeds, scan policies, repositories, and user access/roles for assessment tools
• Support API discovery and scanning, and integration of assessment data into third-party tools
• Coordinate with SCC Security Operations team to support tool operations, testing, and vulnerability management activities

Required Skills:

• Information Security-related experience
• Software Vulnerability Management related experience
• Experience troubleshooting vulnerability scan tools and scan configurations
• Experience with automation supporting vulnerability assessment operations
• Experience supporting Information System Vulnerability Management (ISVM) scans and compliance activities
• Experience with API discovery and security scanning
• Experience and proficiency with Microsoft, SharePoint and Power BI
• Proven analytical and problem-solving abilities
• Excellent verbal and written communication skills
• Ability to work independently with minimal direction and as a team
• Highly motivated and self-directed

About Us:

Since 2000, Tri-Force Consulting Services ( https://triforce-inc.com ) has been an MBE/SDB certified IT Consulting firm in the Philadelphia region. Tri-Force specializes in IT staffing, software development (web and mobile apps), systems integration, data analytics, system automation, cybersecurity, and cloud technology solutions for government and commercial clients. Tri-Force works with clients to overcome obstacles such as increasing productivity, increasing efficiencies through automation, and lowering costs. Our clients benefit from our three distinguishing core values: integrity, diligence, and technological excellence. Tri-Force is a six-time winner among the fastest-growing companies in Philadelphia and a four-time winner on the Inc. 5000 list of the nation's fastest-growing companies.