Vulnerability Management Analyst – DoD (PowerShell & RMF)

Centuria; Town of Bedford (NY); On-site; USD 90,000 - 120,000; Full time

Job summary

Centuria is seeking a Vulnerability Management Analyst at Hanscom AFB to identify, analyze, and remediate vulnerabilities across enterprise systems. The role emphasizes proactive collaboration and automation-driven patch management using ACAS, ARAD/Tanium, and PowerShell scripting.

You will work in a DoD-focused environment, coordinating with Cybersecurity, IT Operations, and Compliance teams to support RMF and STIG requirements while communicating risk to technical and non-technical

Qualifications

• Experience with vulnerability management in Windows environments.
• Knowledge of RMF/STIG and DoD cybersecurity frameworks is preferred.
• Experience using ACAS, Nessus, Tanium for scanning and remediation.

Responsibilities

• Perform vulnerability scanning, assessment, and remediation tracking.
• Coordinate patching with system administrators and owners.
• Develop and maintain PowerShell scripts to automate tasks.
• Apply secure baselines and GPO configurations in AD/Windows Server.
• Track vulnerability closure using ticketing systems like ServiceNow.
• Produce status reports on vulnerability posture for leadership.
• Collaborate with Cybersecurity, IT Ops, and Compliance teams.

Skills

Windows OS hardening

Vulnerability management tools

Patch management

PowerShell scripting

Active Directory / GPO

ServiceNow

Orchestration/automation

Strong communication

Education

Associate’s degree in Information Technology or related field

Tools

ACAS

Nessus

Tanium

Qualys

ServiceNow

PowerShell

Job description

Centuria is seeking a Vulnerability Management Analyst at Hanscom AFB to identify, analyze, and remediate vulnerabilities across enterprise systems. The role emphasizes proactive collaboration and automation-driven patch management using ACAS, ARAD/Tanium, and PowerShell scripting.

You will work in a DoD-focused environment, coordinating with Cybersecurity, IT Operations, and Compliance teams to support RMF and STIG requirements while communicating risk to technical and non-technical