vulnerability analyst

<div>Overview:
<div><b>
Working across the globe, V2X builds smart solutions designed to integrate physical and digital infrastructure from base to battlefield. We bring 120 years of successful mission support to improve security, streamline logistics, and enhance readiness. Aligned around a shared purpose, our $3.9B company and 16,000 people work alongside our clients, here and abroad, to tackle their most complex challenges with integrity, respect, responsibility, and professionalism.</b></div><div><br>
</div><div>As a Vulnerability Analyst working on the Department of Defense (DoD) network, your duties would encompass a wide range of responsibilities aimed at ensuring the security and integrity of sensitive information and systems.</div><div></div><div><br>
Vulnerability Analysts conduct comprehensive assessments of computing systems, networks, and applications to identify and mitigate potential security risks. While leveraging cybersecurity methodologies, analysts analyze vulnerabilities, assess their impact, and collaborate with cross-functional teams to implement effective remediation plans of action with milestones. Seeks to protect and defend information and information systems by ensuring data confidentiality and integrity with non-repudiation, authentication, and availability of data and technology through assessments of control frameworks.</div><div></div><div><br>
Vulnerability Analysts strategically plan, coordinate, scan, analyze, and report compliance of the Department of Defense Information Network (DoDIN) to its Cybersecurity Services customers on the SWA regional and theater level. Program: OMDAC-SWACA</div><div></div><div><b><br>
This position offers company-paid housing and transportation, a completion bonus and tuition reimbursement program!</b></div><div></div><div><br>
You must satisfy all host country requirements to legally work in the host country in order to be qualified for this position.</div>
Responsibilities:
<ul><li>Conduct regular security assessments and audits of information systems with the DoD SWA network.</li><li>
Develop and implement action plans to manage common vulnerabilities and exposures.</li><li>
Design report templates for daily use and distribution to customers and subordinate personnel to maintain at minimum a 95% overall vulnerability compliancy rating.</li><li>
Monitor Information Assurance Security Alerts &amp; Bulletins to detect and ensure rapid initial response to any cybersecurity related incident or event that could cause harm to the SWA AOR of the DoDIN.</li><li>
Maintain cross-communication with other cybersecurity division (e.g. IDS/IPS &amp; ArcSight) to discover attempts to exploit known and zero-day vulnerabilities.</li><li>
Recommend improvements to the overall cybersecurity posture.</li><li>
Possess the ability to communicate effectively with management and upper echelon military personnel to ensure information is disseminated timely and efficiently.</li><li>
Maintain working knowledge of vulnerability management systems (Tenable &amp; Nessus) Provides technical and operational support to functional end users of vulnerability tools (e.g. Assured Compliance Assessment Solution) ACAS and TYCHON.</li><li>
Prepares vulnerability scanning reports to submit to commanders and higher headquarters. Interfaces with the IAVM Manager and ISSO regarding vulnerability and remediation issues.</li><li>
Additional requirements may vary depending upon location.</li><li>
Performs other duties and assignments as required.</li></ul>
Qualifications:
<ul><li><b>Qualifications</b></li><li><b>
Security Clearance:</b><b>
</b><ul><li>Requires an active Secret Clearance</li></ul></li><li><b>
Education / Certifications:</b> <i>One-year related experience can be substituted for one year of education if the degree is required.</i><ul><li>
Bachelor&rsquo;s Degree or equivalent experience preferably in Computer Science or MIS, IS, Engineering or related field.</li><li>
This position requires candidates to adhere to DoD 8570.01M. All candidates are required to maintain at least one (1) baseline certification and one (1) computing environment (CE) certification. Baseline certifications cannot also be used as a Computing Environment (CE) certification.</li><li>
The authorized certifications for this job title are listed as follows:</li></ul></li><li><b>
BASELINE:</b><ul><li>
Cisco: CCNP: Certified Network Professional - Security</li><li>
CompTIA: CASP+ ce: Advanced Security Practitioner</li><li>
GIAC: GCED: Certified Enterprise Defender</li><li>
GIAC: GCIH: Certified Incident Handler</li><li>
ISACA: CISA: Certified Information Systems Auditor</li><li>
ISC2: CCSP: Certified Cloud Security Professional</li><li>
ISC2: CISSP (<b>or Associate</b>): Certified Information Systems Security Professional</li><li>
ISC2: CCSP: Certified Cloud Security Professional</li></ul></li><li><b>
COMPUTING ENVIRONMENT (CE)</b>:<ul><li>
Cisco: CCIE: Certified Internetwork Expert (<b>Any</b>)</li><li>
Cisco: CCNP: Certified Network Professional (<b>Any</b>)</li><li>
EC Council: CEH: Certified Ethical Hacker</li><li>
EC Council: ECIH: Certified Incident Handler</li><li>
EC-Council: CHFI: Certified Hacking Forensic Investigator</li><li>
EC-Council: CND: Certified Network Defender</li><li>
GIAC: GCIH: Certified Incident Handler</li><li>
Microsoft: 365 Certified: Enterprise Administrator Expert</li><li>
Microsoft: Certified: Azure Associate (<b>Any</b>)</li><li>
Microsoft: Certified: Azure Expert (<b>Any</b>)</li><li>
Microsoft: MCSE: (<b>Any above 2012</b>)</li><li>
Red Hat: RHCA: Certified Architect</li><li>
Red Hat: RHCE: Certified Engineer</li><li>
Red Hat: RHSA: Certified Systems Administrator</li></ul></li><li><b>
Experience:</b> <i>One year of related academic study above the high school level may be substituted for one year of experience up to a maximum of a 4-year bachelor's degree in a Software Engineering or Business Information Systems discipline for three years general experience.</i><ul><li>
Requires a minimum of seven (7) years of experience in telecommunications sector.</li><li>
Experience with a customer service-oriented company.</li></ul></li></ul><h4 class="jobSectionHeader"><b>
At V2X, we are deeply committed to both equal employment opportunity, including protection for Veterans and individuals with disabilities, and fostering an inclusive and diverse workplace. We ensure all individuals are treated with fairness, respect, and dignity, recognizing the strength that comes from a workforce rich in diverse experiences, perspectives, and skills. This commitment, aligned with our core Vision and Values of Integrity, Respect, and Responsibility, allows us to leverage differences, encourage innovation, and expand our success in the global marketplace, ultimately enabling us to best serve our clients. </b><b>#Clearance #LI-KA</b></h4></div>

Vulnerability Analyst I - Secret Clearance

Zelis Healthcare

<div><div>About Us</div><div>
Zelis is modernizing the healthcare financial experience in the United States (U.S.) across payers, providers, and healthcare consumers. We serve more than 750 payers, including the top five national health plans, regional health plans, TPAs and millions of healthcare providers and consumers across our platform of solutions. Zelis sees across the system to identify, optimize, and solve problems holistically with technology built by healthcare experts &ndash; driving real, measurable results for clients.</div><div></div><div>
Why We Do What We Do</div><div>
In the U.S., consumers, payers, and providers face significant challenges throughout the healthcare financial journey. Zelis helps streamline the process by offering solutions that improve transparency, efficiency, and communication among all parties involved. By addressing the obstacles that patients face in accessing care, navigating the intricacies of insurance claims, and the logistical challenges healthcare providers encounter with processing payments, Zelis aims to create a more seamless and effective healthcare financial system.</div><div></div><div>
Zelis India plays a crucial role in this mission by supporting various initiatives that enhance the healthcare financial experience. The local team contributes to the development and implementation of innovative solutions, ensuring that technology and processes are optimized for efficiency and effectiveness. Beyond operational expertise, Zelis India cultivates a collaborative work culture, leadership development, and global exposure, creating a dynamic environment for professional growth. With hybrid work flexibility, comprehensive healthcare benefits, financial wellness programs, and cultural celebrations, we foster a holistic workplace experience. Additionally, the team plays a vital role in maintaining high standards of service delivery and contributes to Zelis&rsquo; award-winning culture.</div><div></div><div>
Position Overview</div>
Job Summary: We are seeking a motivated and detail-oriented Vulnerability / Configuration Management Analyst to join our cybersecurity team. The ideal candidate will assist in identifying, analyzing, and mitigating security vulnerabilities, as well as managing configuration settings to ensure the security and integrity of our systems.<div></div><div><br>
Job Summary: We are seeking a motivated and detail-oriented Vulnerability / Configuration ManagemenAnalyst to join our cybersecurity team. The ideal candidate will assist in identifying, analyzing, and mitigating security vulnerabilities, as well as managing configuration settings to ensure the security and integrity of our systems.</div><div>
Daily Job Responsibilities:</div><ul><li><div>
Vulnerability Assessment: Conduct regular assessments to identify potential security risks in the organization&rsquo;s systems and applications.</div></li><li><div>
Incident Response: Assist in providing vulnerability information to security responders that may be applicable during an incident.</div></li><li><div>
Patch Management: Coordinate with IT teams to ensure timely application of security patches and updates to mitigate vulnerabilities.</div></li><li><div>
Documentation: Create and maintain detailed documentation of vulnerability findings, remediation actions, and configuration changes.</div></li><li><div>
Compliance Monitoring: Ensure systems and configurations comply with industry standards and regulatory requirements.</div></li><li><div>
Collaboration: Work closely with other cybersecurity team members and IT staff to implement security best practices and improve overall security posture.</div></li><li><div>
Reporting: Generate and present reports on vulnerability and configuration management activities to senior management.</div></li></ul><div>
Skill Requirements:</div><ul><li><div>
Technical Knowledge: Understanding of common vulnerabilities and exposure (CVE) databases, vulnerability scanning tools, and configuration management principles.</div></li><li><div>
Analytical Skills: Strong analytical and problem-solving skills to identify and address security issues effectively. Understand and interpret exposure related data.</div></li><li><div>
Communication: Excellent written and verbal communication skills to document findings and collaborate with team members.</div></li><li><div>
Attention to Detail: High level of attention to detail to ensure accurate tracking and remediation of vulnerabilities and configuration changes.</div></li><li><div>
Team Player: Ability to work well in a team environment and collaborate with various stakeholders to achieve security objectives.</div></li><li><div>
Self-Starter: Demonstrated ability to take initiative, work independently, and proactively.</div></li></ul><div></div><div><br>
Qualifications:</div><ul><li><div>
Bachelor&rsquo;s degree in computer science, Information Technology, Cybersecurity, or a related field.</div></li><li><div>
Relevant certifications (e.g., CompTIA Security+, ISC2, SANS GSEC, CEH, AWS, Azure) are a plus.</div></li><li><div>
Understanding of security best practices and security frameworks from an organization-wide perspective (NIST, ISO)</div></li><li><div>
3-5 years of experience in cybersecurity, vulnerability management, or security analytics.</div></li></ul><div></div><div>
Commitment to Diversity, Equity, Inclusion, and Belonging</div><div>
At Zelis, we champion diversity, equity, inclusion, and belonging in all aspects of our operations. We embrace the power of diversity and create an environment where people can bring their authentic and best selves to work. We know that a sense of belonging is key not only to your success at Zelis, but also to your ability to bring your best each day.</div><div></div><div><br>
Equal Employment Opportunity</div><div>
Zelis is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.</div><div></div><div><br>
Accessibility Support</div><div>
We are dedicated to ensuring our application process is accessible to all candidates. If you are a qualified individual with a disability and require reasonable accommodation with any part of the application and/or interview process, please email <div>talentacquisition@zelis.com</div>.</div></div>

Vulnerability / Configuration Management Analyst

AL GHAITH TECHNICAL SERVICES

<p>Penetration Tester / Vulnerability Analyst &ndash; LLM Security Focus</p><p>Role Overview:</p><p>We&rsquo;re looking for a skilled Pen Tester &amp; VA Specialist with experience in AI / LLM system testing. You&rsquo;ll perform security assessments across web, API, cloud, and AI environments &mdash; focusing on prompt injection, guardrail bypass, model extraction, and Zero-Trust validation for enterprise and government clients.</p><p>Key Responsibilities:</p><p>Conduct web, API, and infrastructure vulnerability assessments &amp; penetration tests.</p><p>Test LLM applications for prompt injection, data leakage, and model theft.</p><p>Use tools like Burp Suite, Trivy, PromptFoo, Garak, NeMo Guardrails, Presidio.</p><p>Produce technical reports and recommend mitigations aligned with ISO 27001 / PDPL.</p><p>Collaborate with DevOps and SOC teams for continuous assurance.</p><p>Qualifications:</p><p>3&ndash;5 yrs in PenTesting / VA or AI Security.</p><p>Strong knowledge of OWASP LLM Top 10, CVSS, MITRE ATT&amp;CK.</p><p>Preferred: OSCP / CEH / AI Security certifications.</p><p>Scripting in Python / Bash is a plus.</p><p>Job Type: Full-time</p>

Cyber security engineer

SAIC

<div><p>Job ID: 2511436</p><p><b>
Location: </b>PEARL HARBOR, HI, US</p><p><b>
Date Posted: </b>2025-11-10</p><p><b>
Category: </b>Cyber</p><p><b>
Subcategory: </b>Cybersecurity Spec</p><p><b>
Schedule: </b>Full-time</p><p><b>
Shift: </b>Day Job</p><p><b>
Travel: </b>Yes, 10 % of the Time</p><p><b>
Minimum Clearance Required: </b>Secret</p><p><b>
Clearance Level Must Be Able to Obtain: </b>None</p><p><b>
Potential for Remote Work: </b>No</p><p><b><br>
Description</b>
</p><p>SAIC is seeking qualified Cybersecurity Analyst for an Air Force TENCAP HOPE 2.0 contract at Joint Base Pearl Harbor Hickam, Hawaii.</p><p></p><p><br>
The Cybersecurity Analyst will:</p><ul><li> Perform network security monitoring and incident response for a DoW customer.</li><li> Support the sustainment of the accredited cybersecurity posture of domain enclaves by actively tracking and maintaining each network&rsquo;s cyber-vulnerability level and system compliance with applicable Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs). Report any deviations or shortfalls to the Information System Security Manager (ISSM) for action.</li><li> Support and assist with the STIG/SRG checklist process, tracking automated compliance scans and manual STIG checklists based on DISA releases. Validate results and track/report compliance of configuration changes based on CYBERCOM tasking orders or other DoW short-notice threat response notifications.</li><li> Maintain lists of active hosts on different networks and the corresponding basic inventory listings of software used to determine STIGs and/or SRGs that need to be applied.</li><li> Assist in researching configuration updates/changes and apply a &ldquo;patch-and-test&rdquo; approach to determine if a particular configuration update/change will have a detrimental effect on the processes and mission to decide on application in the operational environment.</li><li> Provide comprehensive cybersecurity support in support of Modeling and Simulation / Live, Virtual, and Constructive (M&amp;S/LVC) information technology systems.</li><li> Provide comprehensive support to scan and remediate networks.</li><li> Provide comprehensive support to security monitoring and detection of unauthorized access.</li><li> Develop and execute Government approved security policies, plans, and procedures, implement data network security measures, operate and monitor network intrusion detection and forensic systems, conduct IS security incident handling, support Continuity of Operations Plan/Disaster Recovery (COOP/DR) plans, and perform certification of IS and networks. Provide technical support for Plan of Action and Mitigation process and remediation activities.</li><li> Provide comprehensive support to obtaining and maintaining Authority to Operate (ATO) accreditation for networks and systems.</li><li> Provide other related support including but not limited to:</li><li> Review system artifacts and documents for accuracy.</li><li> Conduct facility visits to observe the actual processes related to each Information Assurance (IA) control (technical, personnel, operational, or management).</li><li> Report security findings and issues associated with the RMF process to the appropriate Cybersecurity POCs.</li><li> Support and coordinate necessary documentation submissions for network and system Interconnection Security Agreements (ISAs), Authority to Connect (ATC), or other security agreements for both persistent and event-based interconnections.</li><li> Participate in meetings with system Information Assurance Security Officers (IASOs), Program Managers (PMs), Information System Security Managers (ISSMs) and their representatives, and other cybersecurity representatives of unit driven events or initiatives. During these meetings present issues and recommendations. Provide meeting reports that outline the discussion topics, problem areas, action items, and resolution recommendations.</li><li> Support system administration personnel with other related functions to include but not limited to implementation and sustainment of cybersecurity best practices in accordance with DoW and DISA directives to maximize confidentiality, integrity, and availability of the networks and training mission.</li><li> For scheduled and unscheduled cybersecurity posture audits, report observations, findings, and any corrective actions applied or recommended. Provide relevant metrics on results of audits, identifying trends and recommendations to reduce vulnerabilities and maintain or improve system security posture.</li></ul><p><b>
Qualifications</b>
</p><p><b>Experience and Qualifications:</b></p><ul><li> Bachelor's and 9, or relevant years of experience in lieu of degree. Must be a US Citizen and currently possess a Secret Security Clearance.</li><li> DoW 8140.03 Foundational Qualification for and Intermediate Level, Vulnerability Analyst Certification.</li><li> Detailed understanding of DoW cybersecurity policies and procedures, including FIPS 199, FIPS 200, NIST 800-53, DHS 4300A SSH, and other applicable policies.</li><li> Comprehensive knowledge of Physical Security principles, methods, and techniques.</li><li> Proficient in operating and configuring ACAS, HBSS, and vulnerability scanners.</li><li> Proficient using MS Office including Word, PowerPoint, Excel, SharePoint, and Teams.</li></ul><p></p><p><b><br>
Desired Experience and Qualifications:</b></p><ul><li> Operating system certification (i.e., Microsoft Certified Solutions Expert and/or Red Hat Certified System Administrator).</li><li> Microsoft Windows environment, UNIX, Linux, , VMWare, VDI zero client architecture.</li><li> Microsoft Certified Solutions Craftsman: Server Infrastructure and/or Red Hat Certified System Administrator.</li><li> Certified Information Systems Security Profession (CISSP) or CompTIA Advanced Security Practitioner (CASP).</li></ul><br>
Target salary range: $120,001 - $160,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.</div>

Cybersecurity Analyst

Vruthii

<p><b>Security Engineer &ndash; Vulnerability Management</b></p><p>Specialist Role in <b>Cybersecurity </b>and <b>Vulnerability Management</b></p><p>We are seeking a highly skilled <b>Security Engineer</b> with a specialised focus on vulnerability management to join our dynamic cybersecurity team. This role is pivotal in safeguarding our organisation's digital assets by identifying, assessing, and remediating security vulnerabilities across our IT infrastructure.</p><p><b>Key Responsibilities</b></p><p>&middot; Assist with the deployment of <b>Vulcan Cyber</b> for orchestrating and automating vulnerability management workflows, prioritisation, and remediation tracking.</p><p>&middot; Assist with the vulnerability management lifecycle, from <b>detection to remediation,</b> ensuring robust protection against threats.</p><p>&middot; Operate and optimise vulnerability management tools, including Vulcan Cyber to conduct comprehensive vulnerability assessments and generate actionable reports.</p><p>&middot; Develop and deliver regular vulnerability reporting, metrics, and dashboards for management and technical teams via <b>Vulcan Cyber, Tenable and Defender</b>.</p><p>&middot; Collaborate with incident response teams using <b>CrowdStrike and Microsoft Defender </b>to correlate vulnerability data with threat intelligence and active security incidents.</p><p>&middot; Maintain up-to-date knowledge of the latest vulnerabilities, exploits, and mitigation techniques, providing guidance and recommendations to IT and business stakeholders.</p><p>&middot; Work closely with IT operations, development, and compliance teams to ensure timely remediation of identified vulnerabilities and adherence to regulatory standards.</p><p>&middot; Contribute to the continuous improvement of vulnerability management processes and integration with other security platforms.</p><p><b>Essential Skills and Experience :-</b></p><p>&middot; Proven experience in vulnerability management, cybersecurity operations, or a related technical field.</p><p>&middot; Expert working knowledge of Vulcan Cyber, including workflow automation, remediation tracking, reporting and prioritisation methodologies.</p><p>&middot; Advanced proficiency with vulnerability management tools such as Tenable.sc and Tenable.io.</p><p>&middot; Hands-on experience with <b>endpoint protection and threat intelligence platforms, specifically CrowdStrike and Microsoft Defender.</b></p><p>&middot; Strong analytical and problem-solving skills, with the ability to interpret complex security data and drive effective remediation.</p><p>&middot; Excellent communication skills, capable of conveying technical information to both technical and non-technical audiences.</p><p><b>PLEASE SHAREYOUR RESUME TO :- VRUTHII.IT@VRUTHII.IN</b></p><p>Job Types: Full-time, Permanent</p><p>Pay: &#8377;1,500,000.00 - &#8377;2,000,000.00 per year</p><p>Benefits:</p><ul><li>Health insurance</li><li>Provident Fund</li></ul><p>Work Location: In person</p>

Security Engineer – Vulnerability Management

Virtu Thinko

<p><b>Role Summary:</b><br/>The Vulnerability Management Engineer will oversee continuous vulnerability scanning, assessment, and reporting across cloud and on-premises environments using Qualys or equivalent tools.</p><p><b>Key Responsibilities:</b></p><ul><li>Conduct regular vulnerability scans and assessments.</li><li>Prioritize vulnerabilities based on CVSS scores and risk factors.</li><li>Coordinate with IT and application teams for remediation and validation.</li><li>Prepare vulnerability trend and risk posture reports.</li><li>Ensure compliance with regulatory and internal security requirements.</li></ul><p><b>Qualifications &amp; Skills:</b></p><ul><li>Bachelor&rsquo;s degree in Information Security or related discipline.</li><li>3&ndash;5 years of experience in vulnerability management or IT security.</li><li>Hands-on experience with Qualys, Tenable, or Rapid7 platforms.</li><li>Familiarity with patch management, risk assessment, and reporting.</li><li>Preferred certifications: CompTIA Security+, Qualys Certified Specialist.</li></ul><p>Job Types: Full-time, Contract<br/>Contract length: 12 months</p><p>Pay: BD800.000 - BD1,200.000 per month</p>

Vulnerability Management Engineer

DTS Solution

Role and Responsibilities 
 
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 <strong>Penetration Testing:</strong> manages and conducts internal and external penetration testing. Vets and coordinates 3rd party vendors and the business to deliver high quality penetration and red team testing. Reviews and validates security findings. Works with the business and information security teams to understand security gaps and guide on improvements.<br> </li>
 <li>
<i> </i> 
 <strong>Vulnerability Scanning:</strong> runs and manages vulnerability scans. Maintains and continuously improves the vulnerability scanning infrastructure. Proactively seeks to minimize operational impact through vulnerability scanning process improvement.<br> </li>
 <li>
<i> </i> 
 <strong>Threat Automation:</strong> creates, develops and manages projects and products that continuously simulate new and emerging security threats and threat actors. Writes, validates and augments tools to support our evolving security requirements, use cases and organizational threat goals. Evaluates and implements software with scalability and repeatability in mind, ensuring that security controls are accurate and measurable.<br> </li>
 <li>
<i> </i> 
 <strong>Red Team Intelligence:</strong> plans, develops and manages unique red team projects to support strategic information security goals. Gains deep insight into infrastructure, applications, business, operational and personnel processes to accurately inform on security risks and vulnerabilities. Emulates and applies real world threat intelligence and attacker techniques to effectively test organizational security. Stays informed, and tenaciously pursues applicable attack paths.<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Certifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 OSCP, GIAC GPEN, GWAPT or other Penetration Testing certifications, CISSP, Certified Ethical Hacker (CEH) required. Scripting (Windows/*nix), Bash, Python, Perl or Ruby, Systems Programming, strong knowledge on OWASP Top 10, Mobile Application PenTesting.<br> </li>
 </ul>
 </div>
 </div>
 
 
 <div>
 <div>
<div>
 <div>
 <div>
 <div>
 <div>
 Send CV </div>
 </div>
 <div>
 <div>
 <p>If you meet the job requirements, please send your CV to</p> </div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

Penetration Testing Consultant / Cyber Security Analyst - Red Team

Search 3140+ Vulnerability analyst jobs near you this November. New roles added regularly across leading industries. Apply today.