Vulnerability Management Analyst-Locals

My3tech; Richmond (VA); On-site; USD 90,000 - 120,000; Full time

Job summary

My3tech is seeking a Vulnerability Management Analyst for a contract role based in Richmond, VA. Local candidates are preferred, with 2-3 days on site each week.

The position involves performing vulnerability assessments across OS, databases, web applications, and enterprise infrastructure, analyzing findings, and supporting remediation and cloud compliance activities. Strong automation, communication skills, and independence are essential.

Qualifications

• Minimum 5 years in information security with a focus on vulnerability management.
• 3+ years in software vulnerability management and remediation support.
• Experience with automation in vulnerability assessment operations.
• Strong communication and ability to work independently and in a team.

Responsibilities

• Perform vulnerability assessments across operating systems, databases, web applications, and enterprise infrastructure.
• Analyze vulnerabilities and support remediation recommendations.
• Support cloud compliance scans and assessment activities.
• Troubleshoot scanning tools, consoles, and configurations.
• Coordinate with SCC Security Operations on tool operations and vulnerability management activities.

Skills

Vulnerability management

Automation

API discovery

Security scanning

Power BI

Communication

Independent work

Analytical thinking

Team collaboration

Tools

Vulnerability scanning tools

Job description

Job Title: Vulnerability Management Analyst

Contract

Only Locals

Role requires 2-3 days ON SITE each week for this reason local Richmond candidates will be considered first.

Responsibilities:

• Perform vulnerability assessments and assist security scanning across operating systems, databases, web applications, and enterprise infrastructure.
• Analyze vulnerabilities and support development of remediation recommendations.
• Support cloud compliance scans and assessment activities.
• Help troubleshoot scanning issues and support maintenance of vulnerability scanning tools, consoles, and configurations.
• Support automated and scheduled scanning activities, including scan planning, execution, and reporting.
• Support ad hoc or emergency vulnerability scanning in support of incident investigation and response activities.
• Create and maintain scan reports, data feeds, scan policies, repositories, and user access/roles for assessment tools.
• Support API discovery and scanning, and integration of assessment data into third-party tools.
• Coordinate with SCC Security Operations team to support tool operations, testing, and vulnerability management activities.

Required Skills:

• 5 years of Information Security-related experience.
• 3 years of Software Vulnerability Management-related experience.
• 3 years of experience troubleshooting vulnerability scan tools and scan configurations.
• 3 years of experience with automation supporting vulnerability assessment operations.
• 3 years of experience supporting Information System Vulnerability Management (ISVM) scans and compliance activities.
• 3 years of experience with API discovery and security scanning.
• 5 years of experience and proficiency with Microsoft, SharePoint and Power BI.
• 5 years of proven analytical and problem-solving abilities.
• 5 years of excellent verbal and written communication skills.
• 5 years of ability to work independently with minimal direction and as a team.
• 5 years of being highly motivated and self-directed.