Vulnerability Management Analyst (TS/SCI) — IAVA Remediation

VulnU; Herndon (VA); On-site; USD 102,000 - 178,000; Full time

Benefits offered by this job

Paid parental leave

Retirement match

Equity

Flexible PTO

Job summary

Amazon Security is hiring a Vulnerability Management Analyst to identify, assess, and drive remediation of vulnerabilities across information systems supporting a high-priority U.S. Government program.

You will develop and sustain the vulnerability management plan, maintain an accurate asset inventory, and enforce a disciplined patching cadence across the platform. You will coordinate with ISSM, platform teams, and government partners to ensure timely remediation and an up-to-date SSP.

Qualifications

• 3+ years of vulnerability management, security operations, or related experience.
• Working knowledge of vulnerability scanning tools and patch management practices.
• Experience producing and maintaining asset inventories and vulnerability/remediation reporting.
• Familiarity with U.S. Government/IC authorization and continuous monitoring requirements.
• Security certification (e.g., CISSP, CySA+, Security+).
• Current, active US Government Security Clearance of TS/SCI with Polygraph.

Responsibilities

• Develop, maintain, and improve the vulnerability management plan and documentation.
• Build and sustain an asset inventory as the basis for coverage.
• Establish and enforce a patching cadence with platform and engineering teams.
• Conduct periodic vulnerability scans and prioritize findings by risk.
• Drive resolution of IAVAs from identification through closure.
• Track remediation and report status to ISSM and government counterparts.
• Maintain the SSP as it relates to vulnerability and patch management.
• Support audit reviews and respond to security inquiries from stakeholders.

Skills

Vulnerability management

Security operations

Vulnerability scanning

Asset inventory

IAVA remediation

Tools

NIST 800-53

RMF

SSP development

Job description

Amazon Security is hiring a Vulnerability Management Analyst to identify, assess, and drive remediation of vulnerabilities across information systems supporting a high-priority U.S. Government program.

You will develop and sustain the vulnerability management plan, maintain an accurate asset inventory, and enforce a disciplined patching cadence across the platform. You will coordinate with ISSM, platform teams, and government partners to ensure timely remediation and an up-to-date SSP.