Responsibilities: The Vulnerability Management Analyst supports vulnerability scanning, analysis, prioritization, remediation coordination, reporting, KEV tracking, and risk-based mitigation across the NIH/OD-OIT managed environment.
- Operate or support host-based, network-based, application, and database vulnerability scanning activities.
- Analyze scan results, identify high-risk vulnerabilities, and develop mitigation guidance.
- Coordinate remediation tracking with system owners, technical POCs, program areas, and security stakeholders.
- Support vulnerability management reporting, ad hoc reports, remediation activity summaries, and risk-based prioritization.
- Track critical vulnerabilities, KEVs, configuration errors, missing assets, unauthorized software/hardware, and remediation timelines.
- Monitor authoritative government and private-sector vulnerability intelligence sources.
- Support integration of vulnerability management with CDM, RMF, risk registers, POA&Ms, and compliance reporting.
Requirements: - Bachelor's Degree or equivalent.
- Experience performing vulnerability analysis, scan review, remediation tracking, technical risk assessment, or security assessments.
- Familiarity with vulnerability scanners, CDM concepts, KEV catalog tracking, CISA BODs, CVSS, configuration findings, and remediation workflows.
- Ability to translate technical findings into clear risk statements and practical mitigation recommendations.
- Strong coordination and reporting skills.
Preferred Qualifications: - Security+, CySA+, Tenable/Qualys/Rapid7 certification, CISSP, CISA, or equivalent.
Location/Work Arrangement:- Schedule is full-time, Monday - Friday 40-hour week, 4/10's, or 9/80's and may require on call or overnight shifts depending on contract needs.
- This position may be fully onsite or hybrid/remote depending on the needs of the specific contract.
Benefits:BGS offers a competitive total compensation package to eligible employees. Benefits include Health, Dental, Vision, Life Insurance, Paid Vacation, 401K, Long and Short-Term Disability.
Starting compensation for this role typical
salary ranges between $131,316 - $154,489 annually is commensurate with experience relative to the position and may vary based on candidate geographical location.
