Vulnerability Management Analyst – DoD Security Clearance

RYAN Consulting Group; United States; On-site; USD 84,000 - 89,000; Full time

Benefits offered by this job

Paid Holidays

Paid Time Off (PTO)

Health, Dental, Vision Coverage

401(k) with Employer Matching

Life Insurance

Job summary

RYAN Consulting Group is seeking a Vulnerability Management Analyst to support the Cybersecurity Center by identifying, assessing, and mitigating cybersecurity risks across DoD systems and assets. You will conduct vulnerability scans, analyze weaknesses, and assist remediation while maintaining procedures and providing metrics.

The role requires an Active Secret clearance, DoD experience, and IAT II/CSSP certifications, with a focus on scanning, reporting, and collaboration across stakeholders.

Qualifications

• Active Secret Clearance
• Experience in a SOC environment
• Experience conducting vulnerability scans
• Experience in a DoD environment
• Knowledge of cyber kill chain
• 5+ years of related experience
• Ability to maintain DoD 8140 / 8570 IAT II certification and CSSP Auditor certifications

Responsibilities

• Identify, analyze, report, remediate, verify vulnerabilities according to DoD directives
• Provide vulnerability metrics and reporting to stakeholders
• Support ISCM and risk management processes with scan data
• Test patches, updates, and hardware configurations; produce baseline reports
• Lead remediation meetings and guide scanning/signature improvements
• Share vulnerability information with DoD and non-DoD partners

Skills

SOC experience

Vulnerability scanning

Cybersecurity

Tools

NIST guidelines

Job description

RYAN Consulting Group is seeking a Vulnerability Management Analyst to support the Cybersecurity Center by identifying, assessing, and mitigating cybersecurity risks across DoD systems and assets. You will conduct vulnerability scans, analyze weaknesses, and assist remediation while maintaining procedures and providing metrics.

The role requires an Active Secret clearance, DoD experience, and IAT II/CSSP certifications, with a focus on scanning, reporting, and collaboration across stakeholders.