Vulnerability Management Analyst for DoD & Cyber Risk

Ryan Consulting Group, Inc.; Smyrna (GA); On-site; USD 84,000 - 89,000; Full time

Job summary

Ryan Consulting Group, Inc. is seeking a Vulnerability Management Analyst to support the Cybersecurity Center in identifying, assessing, and mitigating cybersecurity risks across DoD systems, assets, and agency capabilities.

Responsibilities include conducting vulnerability scans, analyzing weaknesses, supporting remediation, and providing metrics and reporting in alignment with DoD and NIST directives. The role requires DoD experience, an active Secret clearance, and DoD 8140/8570 IAT II

Qualifications

• Experience working in a SOC environment.
• Experience conducting vulnerability scans.
• Experience working in a DoD environment.
• Knowledge of cyber kill chain.
• At least 5 years of related experience.
• Active Secret security clearance.
• Ability to maintain DoD 8140 / 8570 IAT II certification and CSSP Auditor certifications.

Responsibilities

• Provide vulnerability management support to identify, assess, and mitigate vulnerabilities across DoD systems and assets.
• Conduct vulnerability scans, analyze findings, and coordinate remediation with stakeholders.
• Maintain vulnerability management procedures and metrics reporting (MTTP, POA&M, non‑compliance trends).
• Support risk management activities and ISCM program with vulnerability data.
• Host remediation/mitigation review meetings and provide SME guidance on scanning and detection capabilities.

Skills

SOC experience

Vulnerability scans

DoD environment

Cyber kill chain

Active Secret clearance

IAT II certification

CSSP Auditor certifications

Job description

Ryan Consulting Group, Inc. is seeking a Vulnerability Management Analyst to support the Cybersecurity Center in identifying, assessing, and mitigating cybersecurity risks across DoD systems, assets, and agency capabilities.

Responsibilities include conducting vulnerability scans, analyzing weaknesses, supporting remediation, and providing metrics and reporting in alignment with DoD and NIST directives. The role requires DoD experience, an active Secret clearance, and DoD 8140/8570 IAT II