Vulnerability Risk Analyst, 24/7 SOC Operations

Peraton Corporation; Washington (District of Columbia); On-site; USD 80,000 - 128,000; Full time

Job summary

Peraton is seeking a Risk and Vulnerability Analyst to support a 24x7 Security Operations Center. Based in Washington, DC or Chandler, AZ, you will identify, analyze, and prioritize vulnerabilities across enterprise, cloud, and application environments to reduce mission risk.

You will conduct scans, automate reporting, track remediation timelines, and ensure compliance with DHS 4300A, NIST SP 800-115, and CISA BOD 23-01, delivering operational risk summaries to SOC leadership.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or related field.
• Minimum 2 years in security operations, vulnerability management, or risk analysis.
• Hands-on experience with vulnerability scanning tools, cloud compliance platforms, ISVM, and API scanning.
• Experience supporting automation of vulnerability analysis and reporting.
• Familiarity with DHS 4300A, NIST SP 800-115, and CISA BOD 23-01 compliance.
• U.S. citizenship required.
• Active Secret security clearance required.

Responsibilities

• Support 24x7 SOC operations by performing continuous vulnerability monitoring and risk analysis.
• Execute vulnerability assessments using industry-standard scanning tools across networks, systems, cloud, and APIs.
• Conduct cloud compliance, ISVM, and API security scanning, validating findings and false positives.
• Correlate vulnerability data with SOC alerts, threat intelligence, and active incidents.
• Automate vulnerability reporting, risk scoring, and remediation tracking workflows.
• Track and enforce remediation timelines in coordination with SOC, IR, and engineering teams.
• Ensure compliance with DHS 4300A, NIST SP 800-115, and CISA BOD 23-01 requirements.
• Provide operational risk summaries, metrics, and reports to SOC leadership and stakeholders.

Skills

Vulnerability scanning

Security operations

Cloud security

API security

Automation

ISVM

Compliance

Education

Bachelor's degree in Cybersecurity/IT

Tools

ISVM

Job description

Peraton is seeking a Risk and Vulnerability Analyst to support a 24x7 Security Operations Center. Based in Washington, DC or Chandler, AZ, you will identify, analyze, and prioritize vulnerabilities across enterprise, cloud, and application environments to reduce mission risk.

You will conduct scans, automate reporting, track remediation timelines, and ensure compliance with DHS 4300A, NIST SP 800-115, and CISA BOD 23-01, delivering operational risk summaries to SOC leadership.