Vulnerability Management Analyst (Enterprise VM)

Valid8 Financial, Inc.; Colorado Springs (CO); On-site; USD 135,000 - 155,000; Full time

Job summary

Summit Technologies, Inc. invites applications for a Vulnerability Management Analyst (Enterprise VM) to cover enterprise-level vulnerability management across approximately 45 U.S. Space Force mission systems in a full-time role in Colorado Springs.

You will translate scanner data into actionable enterprise risk insights and decision-support products. The position requires 5-7 years of cybersecurity experience, including 3+ years in vulnerability management or SOC/DCO, and hands-on analysis of

Qualifications

• Bachelor's degree in cybersecurity, information technology, computer science, or related field.
• 5-7 years of cybersecurity experience with 3+ years in vulnerability management or SOC/ DCO.
• Hands-on experience translating vulnerability findings into risk-focused reporting.

Responsibilities

• Analyze vulnerability data for anomalies, patterns, and enterprise risk.
• Manage vulnerability-scanning repositories, data sources, and tools.
• Support vulnerability management processes, compliance tracking, and risk prioritization.
• Produce recurring reports, scorecards, and prioritized action lists.
• Track findings from Red Team events, audits, and inspections.
• Collaborate with intelligence partners to fuse threat and vulnerability information.
• Support POA&M development, tracking, and leadership decision-making.

Skills

Cybersecurity

Vulnerability management

Threat intelligence

Education

Bachelor's degree in cybersecurity or related field

Tools

ACAS

Nessus

Job description

Vulnerability Management Analyst (Enterprise VM)

Location

Employment

Full-time - anticipated contract staffing

Clearance

Clearance/certification requirements will be aligned to the final PWS and designated cyber work role.

Position Summary

Perform enterprise-level vulnerability management analysis, trending, prioritization, and reporting across approximately 45 U.S. Space Force space mission systems. The analyst translates scanner, assessment, inspection, and threat information into actionable enterprise risk insights and decision-support products.

Primary Responsibilities

• Analyze vulnerability data for anomalies, recurring patterns, systemic weaknesses, and enterprise-level mission risk.
• Manage and maintain vulnerability-scanning repositories, data sources, and supporting analysis tools.
• Support component-level vulnerability management processes, compliance tracking, and risk prioritization.
• Produce recurring vulnerability-management reports, scorecards, trend products, and prioritized action lists.
• Track and assess findings from Red Team events, adversarial assessments, audits, and inspections.
• Collaborate with intelligence and cybersecurity partners to fuse threat and vulnerability information for improved prioritization.
• Support POA&M development, tracking, risk reporting, and leadership decision-making.

Required Education and Experience

• Bachelor's degree in cybersecurity, information technology, computer science, or a related field.
• 5-7 years of relevant cybersecurity experience, including 3+ years in vulnerability management, Security Operations Center (SOC), or Defensive Cyberspace Operations (DCO) activities.
• Hands-on experience analyzing vulnerability scan results and translating technical findings into risk-focused reporting.
• Experience with POA&Ms, scorecards, trend analysis, and cybersecurity risk reporting.

Preferred Qualifications

• Experience with ACAS, Nessus, or comparable vulnerability-scanning platforms.
• Experience supporting enterprise DoD or U.S. Space Force vulnerability-management programs.

Note: The anticipated salary range for this contingent upon award position is $135K-$155K annually. The final offered salary will be determined by the candidate's specific qualifications, relevant experience, location, and the final funding level approved by the client upon contract award.

Summit Technologies, Inc. is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

Position descriptions serve as a guideline and may not be construed as a guarantee of employment. Summit Technologies, Inc. is an at-will organization.

We are required by law to provide equal employment opportunity to qualified people with disabilities. We are also required to measure our progress toward having at least 7% of our workforce be individuals with disabilities. To do this, we must ask applicants and employees if they have a disability or have ever had a disability. Because a person may become disabled at any time, we ask all of our employees to update their information at least every five years. Identifying yourself as an individual with a disability is voluntary, and we hope that you will choose to do so. Your answer will be maintained confidentially and not be seen by selecting officials or anyone else involved in making personnel decisions. Completing the form will not negatively impact you in any way, regardless of whether you have self-identified in the past. For more information about this form or the equal employment obligations of federal contractors under Section 503 of the Rehabilitation Act, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.