Vulnerability Management Analyst | TS/SCI | Flexible Hours

Amazon Inc.; Herndon (VA); Sur place; USD 102 000 - 178 000; Plein temps

Résumé du poste

Amazon Web Services (AWS) Security seeks a Vulnerability Management Analyst to identify, assess, and drive remediation of vulnerabilities across information systems supporting a high-priority U.S. Government program.

You will develop and maintain the vulnerability management plan, sustain an accurate asset inventory, and establish a disciplined patching cadence across the platform. You will run scans, analyze findings by risk, and drive IAVA closure, while maintaining the SSP and supporting

Qualifications

• 3+ years of vulnerability management, security operations, or related experience.
• Working knowledge of vulnerability scanning tools and patch management practices.
• Experience producing and maintaining asset inventories and vulnerability/remediation reporting.
• Working knowledge of NIST 800-53, RMF, and SSP development as it relates to vulnerability management.
• Current, active US Government Security Clearance of TS/SCI with Polygraph.

Responsabilités

• Develop, maintain, and continuously improve the vulnerability management plan and supporting documentation.
• Build and sustain an accurate, comprehensive asset inventory as the basis for vulnerability coverage.
• Establish and enforce a patching cadence, coordinating with platform and engineering teams to remediate on schedule.
• Conduct periodic vulnerability scans, validate results, and prioritize findings by risk and operational impact.
• Drive resolution of Information Assurance Vulnerability Alerts (IAVAs) from identification through closure.
• Track remediation to completion and report status to the ISSM and U.S. Government counterparts.
• Maintain the System Security Plan (SSP) as it pertains to vulnerability and patch management.
• Support periodic audit review and respond to ad hoc security inquiries from government stakeholders.
• Contribute to the development and refinement of scanning, reporting, and remediation processes and automation to improve efficiency.
• Help sustain a valid Authorization to Operate (ATO) by ensuring continuous vulnerability management.

Connaissances

Vulnerability management

Security operations

Asset inventories

NIST 800-53 & RMF

TS/SCI with Polygraph

Description du poste

Amazon Web Services (AWS) Security seeks a Vulnerability Management Analyst to identify, assess, and drive remediation of vulnerabilities across information systems supporting a high-priority U.S. Government program.

You will develop and maintain the vulnerability management plan, sustain an accurate asset inventory, and establish a disciplined patching cadence across the platform. You will run scans, analyze findings by risk, and drive IAVA closure, while maintaining the SSP and supporting