Vulnerability Risk Analyst - Hybrid, Scanning & Cloud

Zohorecruit; Richmond (VA); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Tri-Force Consulting Services, Inc. is seeking a Vulnerability Management Analyst for a 12-month contract in the Richmond, VA area. The role supports vulnerability assessment and risk analysis at the State Corporation Commission, with a hybrid onsite/remote schedule (3 days on-site, 2 days remote).

The candidate will perform vulnerability assessments, support remediation efforts, and help improve enterprise visibility into cyber risks using tools like Microsoft, SharePoint, and Power BI.

Qualifications

• 5+ years of information security or vulnerability management experience.
• Experience with vulnerability scanning tools and configurations.
• Experience with automation to support vulnerability assessment operations.
• Experience with ISVM scans and compliance activities.
• Experience with API discovery and security scanning.
• Proficiency in Microsoft, SharePoint and Power BI tools.
• Strong analytical and problem-solving abilities.
• Excellent verbal and written communication skills.
• Ability to work independently and in a team.

Responsibilities

• Perform vulnerability assessments across OS, databases, web apps, and enterprise infrastructure.
• Analyse vulnerabilities and support remediation recommendations.
• Support cloud compliance scans and assessments.
• Troubleshoot scanning issues and maintain tools/configs.
• Support automated and scheduled scanning, planning, and reporting.
• Assist with incident investigations via vulnerability scanning.
• Create and maintain scan reports, data feeds, and access controls.
• Coordinate with SCC Security Operations and integrate data with third-party tools.

Skills

Information security experience

Vulnerability management

Vulnerability scan tooling

Automation in vulnerability ops

ISVM scans & compliance

API discovery & security scanning

Microsoft, SharePoint & Power BI

Analytical & problem solving

Verbal & written communication

Independent & team work

Self-motivated & self-directed

Tools

Microsoft Suite

SharePoint

Power BI

Job description

Tri-Force Consulting Services, Inc. is seeking a Vulnerability Management Analyst for a 12-month contract in the Richmond, VA area. The role supports vulnerability assessment and risk analysis at the State Corporation Commission, with a hybrid onsite/remote schedule (3 days on-site, 2 days remote).

The candidate will perform vulnerability assessments, support remediation efforts, and help improve enterprise visibility into cyber risks using tools like Microsoft, SharePoint, and Power BI.