Vulnerability Management Analyst - RMF/NIST

Quantum Research International Inc; Springfield (VA); On-site; USD 85,000 - 120,000; Full time

Job summary

Quantum Research International, Inc. is seeking a Vulnerability Management Analyst to support the NGA Defender team in Springfield, VA. The role emphasizes RMF-based assessments, vulnerability scanning, and remediation planning for NGA-authorized systems on-site only.

Ideal candidates will have cybersecurity experience, familiarity with Nessus/ACAS/Tenable, and knowledge of NIST SP 800-37 RMF guidelines. TS/SCI eligibility is preferred; CI polygraph may be required.

Qualifications

• Bachelor's degree in a technically relevant field preferred or experience with related certifications.
• Experience with vulnerability management tools (Nessus/ACAS/Tenable).
• Knowledge of RMF processes and NIST guidelines (SP 800-37).
• Familiarity with cyber defense auditing and related regulations.

Responsibilities

• Perform assessments of systems and networks to identify deviations from configurations and policies.
• Coordinate remediation actions with system owners and track findings.
• Develop measures of effectiveness for defense-in-depth architectures.
• Identify systemic security issues from vulnerability data and STIGs.
• Prioritize vulnerability reduction activities based on threat data and mission criticality.
• Conduct vulnerability scans and mitigate vulnerabilities in security systems.
• Analyze web application vulnerabilities and advise remediation actions.
• Apply cybersecurity and privacy principles to organizational requirements.

Skills

Nessus

ACAS

Tenable

Vulnerability management

RMF

NIST SP800-37

Threat analysis

Education

Bachelor's degree in Cybersecurity

Bachelor's degree in Computer Science

Tools

Nessus

ACAS

Ten able

Job description

Quantum Research International, Inc. is seeking a Vulnerability Management Analyst to support the NGA Defender team in Springfield, VA. The role emphasizes RMF-based assessments, vulnerability scanning, and remediation planning for NGA-authorized systems on-site only.

Ideal candidates will have cybersecurity experience, familiarity with Nessus/ACAS/Tenable, and knowledge of NIST SP 800-37 RMF guidelines. TS/SCI eligibility is preferred; CI polygraph may be required.