vulnerability analyst

Koniag Government Services

Koniag IT Systems, LLC, a Koniag Government Services company, is seeking a Cyber Vulnerability Analyst (Encryptor Specialist) with a TS/SCI security clearance to support KPS and our government customer in Falls, Church, VA.
 
We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.
 
We are seeking a highly skilled and motivated Cyber Vulnerability Analyst to support the government support team. This role is responsible for implementing protections of government network infrastructure, with a specialized focus on identifying, analyzing, and mitigating vulnerabilities associated with various HAIPE (High Assurance Internet Protocol Encryptor) hardware and other network systems. The ideal candidate will assess systems against established policies, measure the effectiveness of our defense-in-depth architecture, and help ensure the integrity of data networks.
 
Key Responsibilities: 
<ul>
<li>Conduct comprehensive vulnerability assessments of systems and networks to identify deviations from security policies and standards.</li>
<li>Utilize industry-standard scanning tools (e.g., Nessus, Qualys, Rapid7) to identify and analyze security risks.</li>
<li>Configure, manage, and troubleshoot encryption devices to ensure secure and reliable operation.</li>
<li>Analyze and respond to digital evidence and threat intelligence to mitigate system and network vulnerabilities effectively.</li>
<li>Assess and vet findings from vulnerability disclosure programs (VDP) to prioritize and remediate security risks.</li>
<li>Ensure all network components and configurations are in compliance with Department of Defense (DoD) security standards and organizational policies.</li>
<li>Develop and maintain cybersecurity indicators to provide awareness of the current threat landscape and the status of the operating environment.</li>
<li>Collaborate with network engineers and system administrators to implement remediation plans and strengthen security posture.</li>
</ul>
Required Qualifications:Security Clearance: 
<ul>
<li>Must possess an active Secret or Top Secret/SCI security clearance.</li>
</ul>
Education & Experience: 
<ul>
<li>Bachelor’s degree in Cybersecurity, Information Technology, or a related field with 3+ years of relevant experience, OR</li>
<li>Associate's degree with 5+ years of relevant experience.</li>
</ul>
Certifications: 
<ul>
<li>Minimum of CompTIA Security+ or an equivalent DoD 8570 baseline certification.</li>
</ul>
Technical Expertise: 
<ul>
<li>Demonstrated experience with the configuration and maintenance of TACLANE devices or similar NSA-certified Type 1 encryption hardware.</li>
<li>Strong understanding of IP networking protocols, VPNs, and network security architecture.</li>
<li>Experience with GEM One encryptor management tools.</li>
<li>Current understanding of industry best-practices for network architectures and security</li>
</ul>
Preferred Skills and Knowledge:Frameworks: 
<ul>
<li>In-depth knowledge of cybersecurity frameworks such as NIST, CVSS, and MITRE ATT&CK.</li>
</ul>
Vendor Hardware: 
<ul>
<li>Familiarity with commercial (e.g. Cisco, Juniper, etc) routers, switches, and security appliances.</li>
</ul>
Threat Analysis: 
<ul>
<li>Experience in collecting, analyzing, and disseminating cybersecurity threat assessments.</li>
</ul>
Environment: 
<ul>
<li>Prior experience working within a Department of Defense (DoD) or government contracting environment.</li>
<li>Familiarity with DoD Instruction 8523.01 and related guidance, preferably with prior experience within the Communications Security (COMSEC) subject area</li>
</ul>
Office Location and Travel: 
<ul>
<li>Falls Church, VA (partial Telework eligible)</li>
<li>Some travel (&lt; 25%)</li>
</ul>
Our Equal Employment Opportunity Policy
 The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.
 
The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e-mail at accommodations@koniag-gs.com or by calling 703-488-9377 to request accommodations.
 
Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com.
 
Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352

Cyber Vulnerability Analyst (Encryptor Specialist)

Vulnerability Assessment Analyst

System One

<div>
 
 Job Title: Qualys Vulnerability Management Analyst
 
 
 Location: Rockville, Maryland
 
 
 Type: Contract
 
 
 Compensation: Negotiable&nbsp;
 
 
 Contractor Work Model: Hybrid
 
 
 
 
 
 
 
 
 Overview:
 
 
 
 
 
 
 
 
 The organization is expanding its Vulnerability Management program and is seeking a highly qualified
 
 Vulnerability Management Analyst
 
 with strong hands-on experience operating Qualys tools
 
 without the need for training
 
 . This role operates in a mission critical security environment and requires exceptional analytical ability, technical expertise, and
 
 excellent written and verbal communication skills
 
 .
 
 
 
 
 
 
 
 
 
 Key Responsibilities:
 
 
 
 
 <ul>
 <li>
 
 
 
 Configure, operate, and maintain enterprise vulnerability assessment tools, with primary responsibility for
 
 Qualys Vulnerability Management, QualysGuard, and Qualys Policy Compliance
 
 .
 
 
 
 </li>
 <li>
 
 
 
 Plan, execute, and manage vulnerability scans, assessments, reports, and dashboards.
 
 
 
 </li>
 <li>
 
 
 
 Investigate vulnerabilities, validate findings, eliminate false positives, and identify trends.
 
 
 
 </li>
 <li>
 
 
 
 Produce clear, concise, and well?structured written documentation, reports, executive summaries, and recommendations.
 
 
 
 </li>
 <li>
 
 
 
 Communicate effectively with technical teams and leadership, explaining complex issues in a clear, business friendly manner.
 
 
 
 </li>
 <li>
 
 
 
 Track and support remediation efforts with IT, engineering, and development teams.
 
 
 
 </li>
 <li>
 
 
 
 Produce metrics and reporting related to threat, vulnerability, and patch management.
 
 
 
 </li>
 <li>
 
 
 
 Deliver security guidance and training to technical and business staff.
 
 
 
 </li>
 <li>
 
 
 
 Recommend updates to security policies, standards, and procedures.
 
 
 
 </li>
 <li>
 
 
 
 Maintain documentation of scanning procedures, schedules, asset inventories, and program updates.
 
 
 
 </li>
 <li>
 
 
 
 Serve as the primary point of contact for all Vulnerability Management Program communications.
 
 
 
 
 </li>
 </ul>
 
 
 
 
 Required Subject Matter Expertise (5+ Years):
 
 
 
 
 <ul>
 <li>
 
 
 
 
 Vulnerability Scanning &amp; Assessments:
 
 
 
 Hands-on experience planning and conducting comprehensive enterprise vulnerability assessments.
 
 
 
 </li>
 <li>
 
 
 
 
 Qualys Platform Expertise:
 
 
 
 Proven ability to configure, administer, and troubleshoot enterprise Qualys tools with no training required.
 
 
 
 </li>
 <li>
 
 
 
 
 IT Service Management Tools:
 
 
 
 Experience with Remedyforce, Zendesk, or comparable enterprise ITSM systems.
 
 
 
 </li>
 <li>
 
 
 
 
 Communication Skills:
 
 
 
 Exceptional written and verbal communication abilities, with demonstrated experience presenting findings to technical teams and executive leadership.
 
 
 
 
 </li>
 </ul>
 
 
 
 
 Required Working Knowledge:
 
 
 
 
 <ul>
 <li>
 
 
 
 At least five years of experience securing operating systems, platforms, applications, networks, and protocols.
 
 
 
 </li>
 <li>
 
 
 
 Experience with Linux/UNIX and Windows environments.
 
 
 
 </li>
 <li>
 
 
 
 Familiarity with commonly deployed applications such as Chrome, Oracle Java, and Adobe Acrobat.
 
 
 
 
 </li>
 </ul>
 
 
 
 
 Preferred Certifications (Qualys):
 
 
 
 
 
 
 
 
 Candidates with any of the following Qualys certifications are strongly preferred:
 
 
 
 <ul>
 <li>
 
 
 
 
 Qualys Vulnerability Management Detection &amp; Response (VMDR) Certification
 
 
 
 
 </li>
 <li>
 
 
 
 
 Qualys Vulnerability Management (VM) Specialist Certification
 
 
 
 
 </li>
 <li>
 
 
 
 
 Qualys Policy Compliance (PC) Specialist Certification
 
 
 
 
 </li>
 <li>
 
 
 
 
 Qualys Certified SME &ndash; Vulnerability Management
 
 
 
 
 </li>
 <li>
 
 
 
 
 Qualys Technical Specialist (QTS) certifications in applicable modules
 
 
 
 
 </li>
 </ul>
 
 
 
 Other relevant cybersecurity certifications (e.g., Security+, CYSA+, CEH, CISSP) are also a plus.
 
 
 
 
 
 
 
 
 
 Deliverables:
 
 
 
 
 <ul>
 <li>
 
 
 
 
 Qualys Administration:
 
 
 
 Complete management of assets, appliances, scans, dashboards, and reporting.
 
 
 
 </li>
 <li>
 
 
 
 
 Security Metrics:
 
 
 
 Regular vulnerability, threat, and patch management reporting.
 
 
 
 </li>
 <li>
 
 
 
 
 Performance Reporting:
 
 
 
 Weekly summaries of completed work, planned activities, risks, and discussion items.
 
 
 
 </li>
 <li>
 
 
 
 
 Vulnerability Mitigation Recommendations:
 
 
 
 Documented remediation and compensating control recommendations.
 
 
 
 </li>
 <li>
 
 
 
 
 Helpdesk Ticket Management:
 
 
 
 Creation and management of all vulnerability related tickets through closure.
 
 
 
 </li>
 <li>
 
 
 
 
 Documentation:
 
 
 
 Updated procedures and inventory documentation for the vulnerability management infrastructure.
 
 
 
 
 </li>
 </ul>
 
 
 
 #M1
 
 
 
 
 
 
 
 
 
 
 
 
 &nbsp;
 
 
 
 
 
 System One, and its subsidiaries including Joul&eacute;, ALTA IT Services, and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.
 
 
 
 
 System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.
 
 
 
 
 
 Ref: #851-Rockville-S1
</div>

Qualys Vulnerability Management Analyst

Quarterhill

<div><h2 class="jobSectionHeader">Job Description
</h2><div>Overview<div> 
The Junior Security Analyst is responsible for assessing, monitoring, and improving the organization&rsquo;s security posture, with a primary focus on incident detection, vulnerability management, response, and resolution across Quarterhill&rsquo;s Roadside, Back Office, Safety divisions.</div><div>
This role involves conducting vulnerability assessments, correlating security events, and guiding the organization&rsquo;s incident response efforts to prevent security breaches. In addition, this position will collaborate with cross-functional teams to enhance security awareness and integrate best practices across the enterprise. As a key contributor to the cybersecurity team, the Security Analyst works to ensure the organization is prepared for, and resilient against, evolving cyber threats.</div> 
<div></div>
 
Responsibilities 
Incident Detection and Response<ul><li>
Perform security event correlation using information from multiple sources to detect threats.</li><li>
Conduct cyber incident triage to assess scope, urgency, and impact.</li><li>
Respond, escalate, and resolve by enforcing security protocols and implementing solutions.</li><li>
Track cyber actions from initial detection through final resolution.</li><li>
Collaborate with internal IT teams and relevant stakeholders to develop and refine runbooks and escalation procedures.</li></ul>
Vulnerability Management<ul><li>
Maintain and update an inventory of all in-scope systems and software, ensuring it remains accurate and up to date.</li><li>
Reconcile data from multiple sources (e.g., CMDBs, network scans, asset management systems) to ensure inventory completeness.</li><li>
Ensure all in-scope systems and software are routinely scanned by the appropriate vulnerability management tools.</li><li>
Analyze and prioritize vulnerability scan results; open tickets, provide technical remediation guidance, and track resolution efforts to closure.</li></ul>
Analysis and Reporting<ul><li>
Conduct trend analysis and provide regular security performance reports.</li><li>
Operate with an awareness of applicable governance, risk, and compliance (GRC) regulations and policies.</li><li>
Utilize SIEM and other monitoring tools (e.g., Splunk, QRadar, Sentinel) to gather data for dashboards and executive summaries.</li></ul>
Policy Development and Training<ul><li>
Assist with the development and refining security protocols, policies, and incident response plans.</li><li>
Assist in the development of employee training programs to enhance organizational cybersecurity awareness.</li></ul>
Post-Incident Analysis<ul><li>
Assess and analyze damage to data and infrastructure.</li>
Provide post-incident reports to management, including root cause analysis and recommendations for prevention. 
<li>
</li></ul> 
Qualifications 
Education and Experience<ul><li>
Bachelor&rsquo;s degree in a computer-related field, cybersecurity, or equivalent experience (including military experience, such as communications or cyber-MOS).</li><li>
Minimum of 1+ year in a cybersecurity role.</li><li>
Experience with Windows and Linux operating systems and database security.</li></ul>
Certifications (Required)<ul><li>
Security+ (CompTIA</li></ul> 
Preferred Certifications (Optional)<ul><li>
CYSA+ (CompTIA Cybersecurity Analyst).</li><li>
Additional relevant certifications (e.g., CEH, GSEC, GCIA) are a plus.</li></ul>
Skills and Knowledge<ul><li>
Working knowledge of current commercial off-the-shelf (COTS) cybersecurity technologies and trends to include SIEM, EDR, and vulnerability management.</li><li>
Familiarity with cybersecurity operations center (SOC) environments.</li><li>
Knowledge of security principles, techniques, and incident response frameworks (e.g., NIST, MITRE ATT&amp;CK).</li><li>
Strong analytical skills for identifying and mitigating threats.</li><li>
Ability to operate effectively in high-pressure environments with shifting priorities.</li><li>
Scripting or automation skills (e.g., Python, PowerShell) and experience with SIEM log queries are highly desirable.</li></ul>
Preferred Qualifications
Hands-On SOC or CSIRT Experience<ul><li>
Experience working in a cybersecurity operations center (SOC) or computer security incident response team (CSIRT) environment.</li><li>
Familiarity with EDR, XDR, or threat-hunting tools.</li></ul>
Project and Time Management<ul><li>
Ability to manage multiple tasks simultaneously, with effective prioritization and communication with senior management.</li><li>
Proven track record of delivering security improvements and initiatives on schedule.</li></ul>
Cybersecurity Engineering Familiarity<ul><li>
Familiarity with tools and technologies used in cybersecurity engineering.</li><li>
Comfortable working with cloud platforms (AWS, Azure, GCP), container security, and DevSecOps practices.</li></ul>
Soft Skills<ul><li>
Strong communication skills to articulate technical concepts to both technical and non-technical audiences.</li><li>
Team-oriented mindset, with a willingness to collaborate across departments to drive a culture of security.</li></ul>
 
Benefits 
We offer a Total Rewards plan designed with you and your family&rsquo;s health and wellness in mind that includes:<ul><li>
Paid days off (i.e. vacation, sick days, bereavement leave)</li><li>
Health and Dental plans</li><li>
Retirement plans</li><li>
Employee and Family Assistance Program (EFAP)</li><li>
Employee referral program</li><li>
Employee Stock Purchase Program (ESPP)</li></ul><div></div><div> 
We welcome applicants from all backgrounds, regardless of race, color, religion, sex, veteran status, sexual orientation, gender identity, national origin, age, or disability or any other protected characteristics in accordance with applicable federal, state/provincial, and local laws. We're committed to creating a workplace where everyone feels valued and respected.</div><div></div> 
We appreciate all responses and will acknowledge only those being considered for an interview.
We respectfully request no calls or unsolicited resumes from Agencies.</div></div>

Junior Security Analyst

PRTC

<div>Position Summary 

PRTC is seeking a Cybersecurity Analyst to support the cooperative&rsquo;s security operations, incident response capabilities, and continuous improvement of the organization&rsquo;s cybersecurity posture.
 
This position will be responsible for monitoring cybersecurity activity, coordinating incident response efforts, and identifying risks across the organization&rsquo;s infrastructure. The analyst will work across endpoint security, network security, vulnerability management, identity monitoring, and data protection controls.
 
 
In addition to strengthening PRTC&rsquo;s internal cybersecurity program, this role will contribute to the development of cybersecurity services that can be delivered to cooperative members and business customers through PRTC&rsquo;s managed services offerings.
 
 
The ideal candidate is a hands-on security professional who can analyze security events, investigate suspicious activity, and translate findings into meaningful improvements to the organization&rsquo;s security posture.
 
Essential Job Functions:
 
Incident Response:  
Serve as the primary point of contact for security incident response activities.  
Coordinate early-stage response efforts and escalate incidents to appropriate personnel when necessary.  
Document investigative findings throughout the life cycle of an incident, and recommend improvements to prevent recurrence.  
Maintain and improve incident response procedures and documentation.
 
Security Monitoring &amp; Threat Detection:  
Monitor, analyze and respond to security events across all endpoints in the network through our SOC, EDR, SIEM and internal logging systems.  
Validate that security telemetry and logging sources are functioning properly and providing adequate visibility daily.
 
Email Security &amp; Phishing Response:  
Review user-reported phishing submissions and suspicious email activity.  
Investigate potential phishing incidents and coordinate remediation actions.  
Support user awareness training and suggest security improvement initiatives related to phishing and social engineering threats.
 
Network Security:  
Review network access control policies and security rules set by PRTC. Suggest changes or additions that could protect PRTC&rsquo;s data further.
 
Vulnerability Management:  
Coordinate and assist in vulnerability assessment activities across organizational systems.  
Review vulnerability findings and suggest prioritization of remediation efforts.  
Produce reports and track remediation progress with relevant teams.  
Possess the ability to develop design specifications, technical requirements, technical diagrams and documentation needed to ensure successful data protection.  
Support protection of Customer Proprietary Network Information (CPNI) and other sensitive organizational data.
 
AI Security &amp; Emerging Technology:  
Review internal usage of artificial intelligence technologies for potential security risks or data exposure.  
Assess current security policies and organizational controls to ensure they address emerging threats associated with AI adoption.
 
Security Governance &amp; Continuous Improvement: &bull; 
Maintain documentation related to security processes and change management activities. &bull; 
Review company policies to ensure compliance with security standards and practices. 
Knowledge, Skills, and Abilities:

 3+ years of experience in cybersecurity, security operations, or a related technical field. 
 Experience investigating security alerts, suspicious activity, and incident response scenarios. 
 Strong understanding of network protocols, system hardening, authentication, and modern attack techniques and tool sets used for those attacks. 
 Experience working with security monitoring platforms, vulnerability management processes, and endpoint protection technologies. 
 Familiarity with NIST CSF, ISO 27001, PCI-DSS, and MITRE ATT&amp;CK frameworks. 
 Ability to clearly document technical findings and communicate security risks to both technical teams and leadership. 
 Experience securing hybrid infrastructure environments, including cloud and on-premises systems.

Education and Experience: 
 Current industry certifications such as CISSP, GIAC, Security+, SecurityX, CySA+, CCSP, or similar are preferred. 

Education and Experience:
<ul>
<li>Current industry certifications such as CISSP, GIAC, Security+, SecurityX, CySA+, CCSP, or similar are preferred.</li></ul></div>

Cybersecurity Analyst

Tyler Technologies

<div>The Application Security Analyst plays a crucial role in safeguarding the integrity and security of Tyler&rsquo;s applications by being accountable for configuring, conducting, and auditing application security scans and tooling tailored to Tyler&rsquo;s products. This position requires a collaborative approach, working closely with development teams to triage vulnerabilities and inefficiencies identified in security scans. The overarching objective of the application security analyst is to enhance Tyler&rsquo;s application security posture while mitigating enterprise-wide risks associated with software vulnerabilities.
Please note: We are not considering candidates who require visa sponsorship for this position. This is a budgetary decision and due to the significant talent available currently who do not require such sponsorship. 
 
Responsibilities<ul><li>
DAST scan onboarding, scan troubleshooting, and optimization.</li><li>
Serve as the first point of contact for the vulnerability disclosure program and coordinate fixes with the responsible teams.</li><li>
Execute project plans and maintain the scope, schedule, and each party&rsquo;s responsibilities.</li><li>
Assist in maintaining a list of Tyler products and their key attributes.</li><li>
Assist in implementing improvements to current Application Security program technologies and processes.</li><li>
Assist divisions in implementing regular automated security testing as part of their software development lifecycle.</li><li>
Stay updated on the latest threats, vulnerabilities, and security technologies through ongoing education and research, ensuring that the application security program evolves to meet emerging challenges</li><li>
Help execute projects to increase Tyler&rsquo;s overall security posture.</li></ul>
Qualifications<ul><li>
Bachelor&rsquo;s degree in information technology, computer science, information assurance, or related field, or comparable work experience.</li><li>
Experience with scripting PowerShell and/or Python (or other scripting languages).</li><li>
Experience with HTTP Protocol.</li><li>
Software administration experience required.</li><li>
Two to four years&rsquo; experience with Tyler products or similar products.</li><li>
Ability to prioritize and complete multiple tasks in a fast-paced, technical environment.</li><li>
Demonstrated ability to maintain a positive, professional attitude.</li><li>
Excellent interpersonal and communication skills, as well as good listening skills.</li><li>
Strong negotiation, conflict resolution, and persuasion skills.</li></ul></div>

Application Security Analyst

Search 3815+ Vulnerability analyst jobs near you this March. New roles added regularly across leading industries. Apply today.

3815 vulnerability analyst jobs Near Me

Cyber Vulnerability Analyst (Encryptor Specialist)

Vulnerability Assessment Analyst

Qualys Vulnerability Management Analyst

Junior Security Analyst

Cybersecurity Analyst

Application Security Analyst

Application Security Analyst