Vulnerability Management Analyst: Patch Automation & RMF

Abacus Technology; Massachusetts; On-site; USD 90,000 - 140,000; Full time

Job summary

Abacus Technology is seeking a Vulnerability Management Analyst to identify, analyze, and remediate vulnerabilities across enterprise systems at Hanscom AFB. This is a full-time position located on-site at Hanscom AFB, MA.

The role requires 2+ years in vulnerability/patch management, DoD or enterprise experience, and a Security+ CE certification. You will work with ACAS/Nessus/Tanium, AD/GP configurations, and RMF/STIG compliance while collaborating with Cybersecurity and IT Operations teams.

Qualifications

• 2+ years of experience in vulnerability management, patch management, or system administration within a DoD or enterprise environment.

Responsibilities

• Perform vulnerability scanning, assessment, and remediation tracking using ACAS (Nessus/Security Center), ARAD (Tanium), or similar tools.
• Analyze scan data and coordinate patching activities with system administrators and functional owners.
• Develop and maintain PowerShell scripts to automate configuration management and patch deployment tasks.
• Work in Active Directory and Windows Server environments to implement secure baselines and GPO configurations.
• Coordinate vulnerability closure through ServiceNow or equivalent ticketing systems, ensuring timely and accurate updates.
• Prepare tracking and status reports on vulnerability status, patch compliance, and risk posture for leadership and compliance reviews.
• Collaborate with Cybersecurity, IT Operations, and Compliance teams to support RMF and STIG compliance requirements.
• Proactively communicate findings, remediation guidance, tracking insights, and risk impacts to both technical and non-technical stakeholders.
• Support HBSS/MECM and related endpoint management tools as required to deploy patches or security updates.

Job description

Abacus Technology is seeking a Vulnerability Management Analyst to identify, analyze, and remediate vulnerabilities across enterprise systems at Hanscom AFB. This is a full-time position located on-site at Hanscom AFB, MA.

The role requires 2+ years in vulnerability/patch management, DoD or enterprise experience, and a Security+ CE certification. You will work with ACAS/Nessus/Tanium, AD/GP configurations, and RMF/STIG compliance while collaborating with Cybersecurity and IT Operations teams.