Vulnerability Management Specialist for Critical Infra

Minerva Cyber Tech; Columbia (MD); On-site; USD 85,000 - 135,000; Full time

Job summary

Minerva Cyber Technologies is seeking a Vulnerability Management Analyst to help organizations understand and reduce technical exposure. You will coordinate authorized vulnerability scanning, validate findings, and prioritize remediation using exploitability, asset criticality, and operational context.

Join a team focused on securing critical infrastructure through hands-on vulnerability assessment, cross-functional collaboration, and guided remediation efforts at client sites.

Qualifications

• Hands-on experience with vulnerability scanning, analysis, and remediation tracking.
• Understanding of networks, operating systems, applications, and common weaknesses (CVEs and misconfigurations).
• Ability to assess scanner output critically and communicate corrective actions.
• Experience respecting scan authorization, operational limits, and change management processes.
• Ability to travel to client sites as needed.

Responsibilities

• Maintain vulnerability scan scope, asset coverage, schedules, credentials, and data quality checks.
• Validate findings and separate false positives, configuration gaps, and exploitable weaknesses.
• Prioritize remediation using exposure, threat intelligence, compensating controls, and business impact.
• Coordinate fixes, exceptions, retesting, and closure evidence with accountable owners.
• Report aging findings, coverage gaps, remediation progress, and recurring root causes.

Skills

Vulnerability scanning

Vulnerability analysis

Remediation tracking

Network understanding

OWASP/CWE awareness

Change management

Travel to client sites

Tools

Tenable

Qualys

Rapid7

Cloud exposure management tools

Job description

Minerva Cyber Technologies is seeking a Vulnerability Management Analyst to help organizations understand and reduce technical exposure. You will coordinate authorized vulnerability scanning, validate findings, and prioritize remediation using exploitability, asset criticality, and operational context.

Join a team focused on securing critical infrastructure through hands-on vulnerability assessment, cross-functional collaboration, and guided remediation efforts at client sites.