Vulnerability Management Analyst - Hybrid/Remote

Boston Government Services, LLC; Oak Ridge (TN); On-site; USD 131,316 - 154,489; Full time

Benefits offered by this job

Health Insurance

Dental Insurance

Vision Insurance

Life Insurance

Paid Vacation

401K

Long and Short-Term Disability

Job summary

Boston Government Services, LLC (BGS) seeks a Vulnerability Management Analyst in Oak Ridge, TN to support vulnerability scanning, analysis, prioritization, remediation coordination, and risk-based mitigation across NIH/OD-OIT managed environments. The role involves coordinating with system owners and security stakeholders to track remediation timelines and produce risk-based guidance.

The position requires a Bachelor’s degree or equivalent and experience with vulnerability scanners and

Qualifications

• Bachelor’s Degree or equivalent.
• Experience performing vulnerability analysis, scan review, remediation tracking, technical risk assessment, or security assessments.
• Familiarity with vulnerability scanners, CDM concepts, KEV catalog tracking, CISA BODs, CVSS, configuration findings, and remediation workflows.
• Ability to translate technical findings into clear risk statements and practical mitigation recommendations.
• Strong coordination and reporting skills.

Responsibilities

• Supports vulnerability scanning, analysis, prioritization, remediation coordination, reporting, KEV tracking, and risk-based mitigation across the NIH/OD-OIT managed environment.
• Operate or support host-based, network-based, application, and database vulnerability scanning activities.
• Analyze scan results, identify high-risk vulnerabilities, and develop mitigation guidance.
• Coordinate remediation tracking with system owners, technical POCs, program areas, and security stakeholders.
• Support vulnerability management reporting, ad hoc reports, remediation activity summaries, and risk-based prioritization.
• Track critical vulnerabilities, KEVs, configuration errors, missing assets, unauthorized software/hardware, and remediation timelines.
• Monitor authoritative government and private-sector vulnerability intelligence sources.
• Support integration of vulnerability management with CDM, RMF, risk registers, POA&Ms, and compliance reporting.

Skills

Vulnerability analysis

Remediation coordination

Risk assessment

Clear risk statements

Reporting

Education

Bachelor's degree

Tools

Tenable

Qualys

Rapid7

Job description

Boston Government Services, LLC (BGS) seeks a Vulnerability Management Analyst in Oak Ridge, TN to support vulnerability scanning, analysis, prioritization, remediation coordination, and risk-based mitigation across NIH/OD-OIT managed environments. The role involves coordinating with system owners and security stakeholders to track remediation timelines and produce risk-based guidance.

The position requires a Bachelor’s degree or equivalent and experience with vulnerability scanners and