Vulnerability Management Analyst – Contract Position

BranCore Technologies, LLC; Richmond (VA); On-site; USD 85,000 - 105,000; Full time

Job summary

BranCore Technologies, LLC is seeking a Risk and Vulnerability Analyst to support vulnerability assessment and risk analysis activities onsite in the Richmond, VA area. The role involves conducting vulnerability scanning, remediation support, and improving visibility into cyber risks.

You will work with Security Operations, cloud and API scanning, and remediation teams to ensure effective vulnerability management. Strong communication and 5+ years in information security are required.

Qualifications

• Information Security-related experience is required.
• Software Vulnerability Management experience is required.
• Experience with vulnerability scan tools and configurations is required.
• Automation experience supporting vulnerability assessment operations is required.
• Experience with ISVM scans and compliance activities is required.
• Experience with API discovery and security scanning is required.
• Experience and proficiency with Microsoft, SharePoint and Power BI is required.
• Strong analytical, problem-solving and communication skills are required.

Responsibilities

• Perform vulnerability assessments across OS, databases, web apps, and enterprise infrastructure.
• Analyze vulnerabilities and draft remediation recommendations.
• Support cloud compliance scans and assessment activities.
• Troubleshoot scanning issues and maintain assessment tools and configurations.
• Support automated and scheduled scanning, including planning and reporting.
• Assist incident response with ad-hoc vulnerability scanning.
• Create and maintain scan reports, data feeds, and access controls for tools.
• Coordinate with Security Operations for tool testing and vulnerability management.

Skills

ISVM experience

Vulnerability scanning

Automation

Security operations

Cloud compliance

API discovery

Power BI

Microsoft & SharePoint

Tools

Vulnerability scanning tools

Security consoles

API integration

Job description

Contract Length: 8 months with the possibility of extending based on project need.
Candidate residing in Richmond, VA area is required.

ON SITE: 2-3 days/week.

Experience supporting Information System Vulnerability Management (ISVM) scans and compliance activities and Software Vulnerability Management is required and experience must be supported/within resume

ABOUT THE ROLE:

The client is seeking a Risk and Vulnerability Analyst to support vulnerability assessment and risk analysis activities at the client. This role is responsible for conducting vulnerability scanning and analysis, supporting remediation efforts, supporting scanning operations, and helping improve enterprise visibility into security weaknesses and cyber risks.

Responsibilities Include:

• Perform vulnerability assessments and assist security scanning across operating systems, databases, web applications, and enterprise infrastructure
• Analyze vulnerabilities and support development of remediation recommendations
• Support cloud compliance scans and assessment activities
• Help troubleshoot scanning issues and support maintenance of vulnerability scanning tools, consoles, and configurations
• Support automated and scheduled scanning activities, including scan planning, execution, and reporting
• Support ad hoc or emergency vulnerability scanning in support of incident investigation and response activities
• Create and maintain scan reports, data feeds, scan policies, repositories, and user access/roles for assessment tools
• Support API discovery and scanning, and integration of assessment data into third-party tools
• Coordinate with client’s Security Operations team to support tool operations, testing, and vulnerability management activities

Required/Desired Skills

Information Security-related experience. Required, 5 Years

Software Vulnerability Management related experience. Required, 3 Years

Experience troubleshooting vulnerability scan tools and scan configurations. Required, 3 Years

Experience with automation supporting vulnerability assessment operations. Required, 3 Years

Experience supporting Information System Vulnerability Management (ISVM) scans and compliance activities. Required, 3 Years

Experience with API discovery and security scanning. Required, 3 Years

Experience and proficiency with Microsoft, SharePoint and Power BI. Required, 5 Years

Proven analytical and problem-solving abilities. Required, 5 Years

Excellent verbal and written communication skills. Required, 5 Years

Ability to work independently with minimal direction and as a team. Required, 5 Years

Highly motivated and self-directed. Required, 5 Years