Seneca Technologies is hiring for a
Vulnerability Assessment Analyst. The Vulnerability Assessment Analyst supports a Department of War (DOW) agency contractor environment cybersecurity operations mission by identifying, assessing, and tracking security vulnerabilities across on-premises and cloud-based environments. The analyst is responsible for conducting vulnerability scans, analyzing findings, recommending remediation actions, and supporting risk-based decision-making. This position works closely with system owners, cybersecurity teams, and stakeholders to improve the agency's security posture through continuous assessment, reporting, and remediation tracking activities.
Key Responsibilities:- Conduct vulnerability scans and security assessments of information systems, applications, networks, and cloud environments.
- Analyze vulnerability assessment results and determine the potential impact to systems and mission operations.
- Develop and recommend remediation strategies to address identified vulnerabilities and security weaknesses.
- Track vulnerability remediation efforts and coordinate with system owners to ensure timely resolution of findings.
- Support continuous monitoring programs through recurring assessments and validation of corrective actions.
- Perform risk-based analysis to prioritize vulnerabilities based on severity, exploitability, and mission impact.
- Generate reports, metrics, dashboards, and status updates related to vulnerability management activities.
- Validate remediation efforts through rescanning and follow-up assessments.
- Support Risk Management Framework (RMF) activities by providing vulnerability assessment data and supporting authorization decisions.
- Collaborate with cybersecurity, engineering, cloud, and operations teams to improve system security and compliance.
- Assist with cybersecurity inspections, audits, compliance reviews, and security assessments.
- Maintain assessment documentation and support reporting requirements for leadership and stakeholders.
Required Qualifications:- Demonstrated experience performing vulnerability assessments, security scanning, and cybersecurity analysis.
- Experience analyzing security findings and recommending risk-based remediation actions.
- Working knowledge of Department of War (DOW) cybersecurity requirements and vulnerability management processes.
- Understanding of Risk Management Framework (RMF), security authorization, and continuous monitoring principles.
- Experience supporting remediation tracking and compliance reporting activities.
- Strong analytical, problem-solving, and communication skills.
- Ability to work independently and collaboratively within a mission-focused cybersecurity environment.
- S. citizenship and ability to obtain and maintain all required government security clearances, as applicable.
- One or more of the following certifications:
- CompTIA Security+ CE
- CompTIA CySA+
- Certified Ethical Hacker (CEH)
- Tenable Certification
- Comparable vulnerability assessment or cybersecurity certification
Education & Experience- Possess current Secret Clearance plus one of the following:
- Bachelor's degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, or a related field and a minimum of five (5) years of experience in vulnerability management, cybersecurity assessments, RMF, or system security activities.
- Or minimum of nine (9) years of directly relevant cybersecurity, vulnerability assessment, or system security experience in lieu of a degree.
Technical Skills & KnowledgeVulnerability Assessment & Management
- Vulnerability Scanning and Analysis
- Vulnerability Prioritization and Risk Assessment
- Remediation Planning and Tracking
- Security Configuration Assessment
- Risk-Based Vulnerability Management
- Continuous Monitoring and Validation
Security Assessment Tools
- Tenable Nessus
- Tenable Security Center or Equivalent Platforms
- Vulnerability Assessment and Compliance Tools
- Security Reporting and Dashboard Solutions
Cloud Security Tools & Platforms
- AWS Native Security Monitoring Tools
- Microsoft Azure Security Monitoring Tools
- Google Cloud Platform (GCP) Security Monitoring Tools
- Cloud Vulnerability Assessment and Configuration Review
Risk Management & Compliance
- DOW Risk Management Framework (RMF)
- NIST Special Publication 800-37
- Security Authorization and Accreditation Processes
- Continuous Monitoring Programs
- Security Control Validation
- Plan of Action & Milestones (POA&M) Management
Cybersecurity Knowledge Areas
- Network Security Principles
- Threat and Vulnerability Analysis
- Security Compliance Requirements
- Security Reporting and Metrics
- Remediation Verification
- Cyber Risk Analysis and Mitigation
Location: Mechanicsburg, PA. Remote work may be authorized. Employees working remotely must reside within commuting distance of an approved SIPRNet access location and be available to support classified work requirements as needed.
Clearance: Active Secret
Travel: Some CONUS travel required
