Vulnerability Management Analyst (OS/Infrastructure)

Unity Technologies Corporation; Virginia, Northern (MN, KY); Hybrid; USD 110,000 - 150,000; Full time

Job summary

UnityTec is seeking a Vulnerability Management Analyst (OS/Infrastructure) to proactively discover, assess, and remediate security risks across enterprise networks, operating systems, and applications. The role is based at Ft.

Belvoir, VA and may involve CONUS/OCONUS travel, collaborating with mission partners to enforce DoD, DLA and DISA security programs. Responsibilities include vulnerability discovery, remediation coordination, continuous monitoring, and strict DoD compliance enforcement.

Qualifications

• At least five (5) years of relevant experience.
• DoD 8570 IAM Level II certification.
• Hands-on experience with vulnerability scanners.
• Understanding of vulnerabilities and remediation techniques.

Responsibilities

• Vulnerability Discovery and Risk Assessment: identify weaknesses with manual reviews and scanners and assess operational risk.
• Remediation Coordination and Mitigation Strategy: coordinate remediation across teams and prioritize by risk.
• Continuous Monitoring, Validation, and Reporting: track security posture and report progress to mission partners.
• Strict DoD and Agency Compliance Enforcement: ensure STIG adherence and support IAVM and DoD policies.

Education

DoD 8570 IAM Level II

Tools

Vulnerability scanners

Job description

Vulnerability Management Analyst (OS/Infrastructure)

• Ft. Belvior, VA
• Information Technology

Company Overview

UnityTec is an SBA-certified Woman-Owned Small Business (WOSB) delivering high-impact professional and technical services to government agencies. With deep expertise in Industrial and Enterprise Systems Modernization, FIAR (Financial Improvement and Audit Readiness), Industrial Facility Transformation, Program and Project Management, Enterprise Support and Consulting, and Advanced Analytics, we empower organizations to modernize operations and advance mission priorities. Our disciplined approach—grounded in dedicated talent, proactive planning, rigorous quality assurance, agile methodologies, cost-effective delivery, and uncompromising ethics—positions UnityTec as a trusted partner committed to achieving measurable, enduring results for our clients.

Job Overview

We are seeking a Vulnerability Management Analyst (OS/Infrastructure) to join our team. You will serve as a Vulnerability Management Analyst responsible for proactively discovering, assessing, and remediating security risks across enterprise networks, operating systems, and applications. Additionally, you will collaborate with mission partners to prioritize remediation efforts and enforce strict adherence to DoD, Defense Logistics Agency (DLA), and DISA security compliance programs. This position is in Ft. Belvoir, VA. This position may require CONUS and OCONUS travel.

Responsibilities include, but are not limited to:

• Vulnerability Discovery and Risk Assessment
  • Conducting targeted manual reviews and utilizing automated vulnerability scanners to identify systemic weaknesses.
  • Analyzing discovered vulnerabilities and accurately characterizing the operational risk to networks, operating systems, applications, databases, and other core information system components.
  • Engaging proactively with stakeholders and mission partners to facilitate seamless vulnerability discovery.
• Remediation Coordination and Mitigation Strategy
  • Facilitating and coordinating comprehensive remediation efforts across multiple teams and system owners.
  • Prioritizing mitigation activities strictly based on characterized risk levels and potential impact.
  • Recommending appropriate, actionable technical measures to remediate identified vulnerabilities and mitigate overarching systemic risks.
• Continuous Monitoring, Validation, and Reporting
  • Tracking ongoing system security postures and logging compliance issues throughout their lifecycle.
  • Generating comprehensive reports regarding security status and remediation progress for mission partners.
  • Validating that applied remedial actions are effective and successfully resolve the targeted vulnerabilities.
• Strict DoD and Agency Compliance Enforcement
  • Ensuring the implementation of mandated security settings, specifically those required by Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIG).
  • Supporting and enforcing compliance with the overarching DoD Information Assurance Vulnerability Management (IAVM) program.
  • Validating that all systems and remediation activities adhere strictly to DLA and broader DoD information security policies.

Required Qualifications:

• A minimum of five (5) years of relevant experience
• DoD Approved 8570 Baseline Certification: Category IAM Level II
• Hands-on experience working with vulnerability scanners
• Understanding of vulnerabilities and remediation techniques

Clearance Requirements:

• Must be a U.S. citizen
• Must possess a current Top-Secret clearance.

UnityTec is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.