Vulnerability Management Analyst – DoD RMF Focus

TIME Systems; Camp Springs (MD); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Health coverage

Dental coverage

Vision coverage

Life insurance and AD&D

401(k)

HSA/FSAs

Job summary

TIME Systems is seeking a Vulnerability Management Analyst to join the Cybersecurity Operations team supporting AFNCR ITS. You will perform vulnerability assessments, review DISA STIGs, coordinate remediation, and assist RMF compliance across DoD environments.

Collaborate with cybersecurity engineers, ISSOs, and system administrators to improve security posture and ensure mission-critical systems stay protected. DoD clearance required.

Qualifications

• Bachelor’s degree in Cybersecurity or related technical field; equivalent education/experience allowed.
• Minimum 4 years in cybersecurity or systems administration with 1 year in vulnerability mgmt.
• Active DoD Secret clearance.
• Current CompTIA Security+ CE or higher with DoD 8570/8140 IAT Level II.
• Hands-on experience with Tenable/Nessus/ACAS.
• Knowledge of STIGs, SCAP, and secure configurations.
• Understanding RMF, NIST 800-53, POA&Ms, and Air Force policies.
• Experience drafting reports and remediation plans.
• Excellent written/verbal communication; able to work independently.

Responsibilities

• Perform vulnerability assessments across classified/unclassified environments using Tenable/Nessus/ACAS.
• Review scan results, prioritize remediation, and validate findings.
• Coordinate remediation with system admins, ISSOs, and engineers.
• Support POA&Ms tracking per RMF requirements.
• Validate DISA STIGs, SCAP results, and secure baselines.
• Generate reports, compliance metrics, and executive summaries.
• Maintain ACAS inventories and scan configurations.
• Assist with vulnerability trend analysis and risk scoring.
• Support audits, inspections, and C&A activities.
• Collaborate across cybersecurity, engineering, and operations teams.
• Maintain SOPs and vulnerability management processes.

Skills

Vulnerability assessment

RMF

NIST SP 800-53

ACAS/Nessus/Tenable

DISA STIGs

SCAP SCC

POA&Ms management

Education

Bachelor’s degree in Cybersecurity or related field

Tools

ACAS

Nessus

Tenable SecurityCenter

SCAP Compliance Checker

eMASS

Job description

TIME Systems is seeking a Vulnerability Management Analyst to join the Cybersecurity Operations team supporting AFNCR ITS. You will perform vulnerability assessments, review DISA STIGs, coordinate remediation, and assist RMF compliance across DoD environments.

Collaborate with cybersecurity engineers, ISSOs, and system administrators to improve security posture and ensure mission-critical systems stay protected. DoD clearance required.