Vulnerability Scan Analyst

Xtreme Solutions, Inc.; California; Remote; USD 90,000 - 120,000; Full time

Benefits offered by this job

Fully remote within continental US

Job summary

Xtreme Solutions, Inc. is seeking a Vulnerability Scanning Analyst to run and analyze automated vulnerability scans across servers, workstations, web apps, and devices, then translate results into actionable findings.

You will validate results, prune false positives, and prioritize risks, delivering curated reports and raw outputs as needed for RFPs, while documenting tool types (commercial, proprietary, or open source).

Qualifications

• 3+ years of vulnerability management or scan analysis experience.
• Proficiency with enterprise vulnerability scanners (Tenable/Nessus, Qualys, Rapid7, or equivalent).
• Strong analytical skills for false-positive triage and risk prioritization.

Responsibilities

• Configure and run vulnerability scanning tools without disrupting systems.
• Validate scan results, eliminate false positives, and prioritize findings.
• Produce curated reports and raw scan outputs for RFPs as required.
• Document whether tools used are commercial, proprietary, or open source.

Skills

Vulnerability management

Scan analysis

False positive triage

Risk prioritization

Analytical skills

Education

GVMA

CompTIA PenTest+

Security+

Tools

Tenable/Nessus

Qualys

Rapid7

Job description

Runs and analyzes automated vulnerability scans across servers, workstations, web applications, and general devices, then validates, filters, and prioritizes results into actionable, management-ready findings.

Key Responsibilities

• Configure and run vulnerability scanning tools without causing system disruption or service degradation.
• Validate scan results, eliminate false positives, and prioritize critical/high/moderate findings.
• Produce both filtered curated reports and raw/unfiltered native scan output as required by the RFP.
• Document whether tools used are commercial, proprietary, or open source.

Required Qualifications

• 3+ years of vulnerability management or scan analysis experience.
• Proficiency with enterprise vulnerability scanners (Tenable/Nessus, Qualys, Rapid7, or equivalent).
• Strong analytical skills for false-positive triage and risk prioritization.

Preferred Qualifications

• GVMA, CompTIA PenTest+, or Security+ certification.
• Experience coordinating scan timing with client IT teams to minimize operational impact.

Travel

• Fully remote; must remain within the continental United States.