Vulnerability Management Risk Advisor

Cleared2Hire | The GovTech Talent Platform; New York (NY); On-site; USD 120,000 - 180,000; Full time

Job summary

Cleared2Hire | The GovTech Talent Platform seeks an experienced Vulnerability Management Risk Advisor to strengthen the cybersecurity posture of New York City agencies. You’ll analyze complex vulnerability data, evaluate risk, and help stakeholders prioritize remediation by exploitability, asset exposure and business impact.

You will advise agency IT teams, monitor threats, track exposure trends, and prepare actionable reports for technical and non-technical stakeholders.

Qualifications

• 5+ years of hands-on experience in vulnerability management or security analysis
• Experience with Rapid7 InsightVM and similar tools
• Strong knowledge of CVEs, threat intel and risk prioritization
• Ability to translate complex data into remediation actions
• Excellent written and verbal communication
• Experience creating technical documentation and SOPs
• Proactive, self-directed in fast-paced environments

Responsibilities

• Analyze vulnerability data from security platforms and assess risk
• Advise agencies on remediation priorities and risk-reduction strategies
• Prepare actionable reports for technical and non-technical stakeholders
• Create SOPs, process documentation and knowledge-base articles
• Maintain vulnerability assessment and remediation records
• Support compliance reporting and audit requirements
• Collaborate with other analysts to improve processes

Skills

Vulnerability management

Cybersecurity operations

Security analysis

Communication

Documentation

SOP creation

Remediation prioritization

Tools

Rapid7 InsightVM

CrowdStrike Falcon

Shodan

Prisma Cloud

Job description

We’re recruiting an experienced Vulnerability Management Risk Advisor to help strengthen the cybersecurity posture of New York City agencies.

This is not simply a vulnerability-scanning position. You’ll serve as a trusted advisor to a portfolio of agencies—analyzing complex vulnerability data, evaluating real-world risk and helping stakeholders prioritize remediation based on exploitability, asset exposure and business impact.

What You’ll Do:

• Analyze findings from Rapid7 InsightVM, CrowdStrike Falcon, Shodan, Prisma Cloud and other security platforms
• Assess vulnerabilities using CVE data, CISA’s Known Exploited Vulnerabilities catalog, threat intelligence and risk-scoring frameworks
• Advise agency IT and security teams on remediation priorities and risk-reduction strategies
• Monitor emerging threats and identify their potential impact
• Track exposure trends and recurring risks across assigned agencies
• Prepare actionable reports for technical and non-technical stakeholders
• Create SOPs, process documentation and knowledge-base articles
• Maintain accurate vulnerability assessment and remediation records
• Support compliance reporting and audit requirements
• Collaborate with other vulnerability management analysts to improve processes and standardize approaches

What We’re Looking For:

• 5+ years of hands-on experience in vulnerability management, cybersecurity operations or security analysis
• Experience with Rapid7 InsightVM and tools such as CrowdStrike, Shodan, Prisma Cloud or comparable platforms
• Strong knowledge of vulnerability assessment, CISA KEV, CVEs, threat intelligence and risk prioritization
• Ability to analyze complex security data and translate findings into practical remediation actions
• Excellent written and verbal communication skills
• Experience creating technical documentation and SOPs
• A proactive, self-directed professional who can succeed in a fast-paced environment

Preferred:

• Experience supporting government, municipal or multi-agency environments
• Familiarity with cloud security and Cloud-Native Application Protection platforms
• Security+, CISSP, GCIH, CEH, Rapid7 or similar cybersecurity certifications

This is an excellent opportunity to move beyond reporting vulnerabilities and directly influence how organizations prioritize, remediate and reduce cyber risk.