vulnerability assessment analyst

Vulnerability Assessment Analyst

System One

<div>
 <strong>
  Job Title: Qualys Vulnerability Management Analyst
  <br/>
  <br/>
  Location: Rockville, Maryland
  <br/>
  <br/>
  Type: Contract
  <br/>
  <br/>
  Compensation: Negotiable&nbsp;
  <br/>
  <br/>
  Contractor Work Model: Hybrid
  <br/>
  <br/>
  <br/>
 </strong>
 <span>
  <span>
   <strong>
    <span>
     Overview:
     <br/>
    </span>
   </strong>
  </span>
 </span>
 <span>
  <span>
   <span>
    The organization is expanding its Vulnerability Management program and is seeking a highly qualified
    <strong>
     Vulnerability Management Analyst
    </strong>
    with strong hands-on experience operating Qualys tools
    <strong>
     without the need for training
    </strong>
    . This role operates in a mission critical security environment and requires exceptional analytical ability, technical expertise, and
    <strong>
     excellent written and verbal communication skills
    </strong>
    .
    <br/>
    <br/>
   </span>
  </span>
 </span>
 <span>
  <span>
   <strong>
    <span>
     Key Responsibilities:
    </span>
   </strong>
  </span>
 </span>
 <ul>
  <li>
   <span>
    <span>
     <span>
      Configure, operate, and maintain enterprise vulnerability assessment tools, with primary responsibility for
      <strong>
       Qualys Vulnerability Management, QualysGuard, and Qualys Policy Compliance
      </strong>
      .
     </span>
    </span>
   </span>
  </li>
  <li>
   <span>
    <span>
     <span>
      Plan, execute, and manage vulnerability scans, assessments, reports, and dashboards.
     </span>
    </span>
   </span>
  </li>
  <li>
   <span>
    <span>
     <span>
      Investigate vulnerabilities, validate findings, eliminate false positives, and identify trends.
     </span>
    </span>
   </span>
  </li>
  <li>
   <span>
    <span>
     <span>
      Produce clear, concise, and well?structured written documentation, reports, executive summaries, and recommendations.
     </span>
    </span>
   </span>
  </li>
  <li>
   <span>
    <span>
     <span>
      Communicate effectively with technical teams and leadership, explaining complex issues in a clear, business friendly manner.
     </span>
    </span>
   </span>
  </li>
  <li>
   <span>
    <span>
     <span>
      Track and support remediation efforts with IT, engineering, and development teams.
     </span>
    </span>
   </span>
  </li>
  <li>
   <span>
    <span>
     <span>
      Produce metrics and reporting related to threat, vulnerability, and patch management.
     </span>
    </span>
   </span>
  </li>
  <li>
   <span>
    <span>
     <span>
      Deliver security guidance and training to technical and business staff.
     </span>
    </span>
   </span>
  </li>
  <li>
   <span>
    <span>
     <span>
      Recommend updates to security policies, standards, and procedures.
     </span>
    </span>
   </span>
  </li>
  <li>
   <span>
    <span>
     <span>
      Maintain documentation of scanning procedures, schedules, asset inventories, and program updates.
     </span>
    </span>
   </span>
  </li>
  <li>
   <span>
    <span>
     <span>
      Serve as the primary point of contact for all Vulnerability Management Program communications.
      <br/>
     </span>
    </span>
   </span>
  </li>
 </ul>
 <span>
  <span>
   <strong>
    <span>
     Required Subject Matter Expertise (5+ Years):
    </span>
   </strong>
  </span>
 </span>
 <ul>
  <li>
   <span>
    <span>
     <strong>
      <span>
       Vulnerability Scanning &amp; Assessments:
      </span>
     </strong>
     <span>
      Hands-on experience planning and conducting comprehensive enterprise vulnerability assessments.
     </span>
    </span>
   </span>
  </li>
  <li>
   <span>
    <span>
     <strong>
      <span>
       Qualys Platform Expertise:
      </span>
     </strong>
     <span>
      Proven ability to configure, administer, and troubleshoot enterprise Qualys tools with no training required.
     </span>
    </span>
   </span>
  </li>
  <li>
   <span>
    <span>
     <strong>
      <span>
       IT Service Management Tools:
      </span>
     </strong>
     <span>
      Experience with Remedyforce, Zendesk, or comparable enterprise ITSM systems.
     </span>
    </span>
   </span>
  </li>
  <li>
   <span>
    <span>
     <strong>
      <span>
       Communication Skills:
      </span>
     </strong>
     <span>
      Exceptional written and verbal communication abilities, with demonstrated experience presenting findings to technical teams and executive leadership.
      <br/>
     </span>
    </span>
   </span>
  </li>
 </ul>
 <span>
  <span>
   <strong>
    <span>
     Required Working Knowledge:
    </span>
   </strong>
  </span>
 </span>
 <ul>
  <li>
   <span>
    <span>
     <span>
      At least five years of experience securing operating systems, platforms, applications, networks, and protocols.
     </span>
    </span>
   </span>
  </li>
  <li>
   <span>
    <span>
     <span>
      Experience with Linux/UNIX and Windows environments.
     </span>
    </span>
   </span>
  </li>
  <li>
   <span>
    <span>
     <span>
      Familiarity with commonly deployed applications such as Chrome, Oracle Java, and Adobe Acrobat.
      <br/>
     </span>
    </span>
   </span>
  </li>
 </ul>
 <span>
  <span>
   <strong>
    <span>
     Preferred Certifications (Qualys):
     <br/>
    </span>
   </strong>
  </span>
 </span>
 <span>
  <span>
   <span>
    Candidates with any of the following Qualys certifications are strongly preferred:
   </span>
  </span>
 </span>
 <ul>
  <li>
   <span>
    <span>
     <strong>
      <span>
       Qualys Vulnerability Management Detection &amp; Response (VMDR) Certification
      </span>
     </strong>
    </span>
   </span>
  </li>
  <li>
   <span>
    <span>
     <strong>
      <span>
       Qualys Vulnerability Management (VM) Specialist Certification
      </span>
     </strong>
    </span>
   </span>
  </li>
  <li>
   <span>
    <span>
     <strong>
      <span>
       Qualys Policy Compliance (PC) Specialist Certification
      </span>
     </strong>
    </span>
   </span>
  </li>
  <li>
   <span>
    <span>
     <strong>
      <span>
       Qualys Certified SME &ndash; Vulnerability Management
      </span>
     </strong>
    </span>
   </span>
  </li>
  <li>
   <span>
    <span>
     <strong>
      <span>
       Qualys Technical Specialist (QTS) certifications in applicable modules
      </span>
     </strong>
    </span>
   </span>
  </li>
 </ul>
 <span>
  <span>
   <span>
    Other relevant cybersecurity certifications (e.g., Security+, CYSA+, CEH, CISSP) are also a plus.
    <br/>
    <br/>
   </span>
  </span>
 </span>
 <span>
  <span>
   <strong>
    <span>
     Deliverables:
    </span>
   </strong>
  </span>
 </span>
 <ul>
  <li>
   <span>
    <span>
     <strong>
      <span>
       Qualys Administration:
      </span>
     </strong>
     <span>
      Complete management of assets, appliances, scans, dashboards, and reporting.
     </span>
    </span>
   </span>
  </li>
  <li>
   <span>
    <span>
     <strong>
      <span>
       Security Metrics:
      </span>
     </strong>
     <span>
      Regular vulnerability, threat, and patch management reporting.
     </span>
    </span>
   </span>
  </li>
  <li>
   <span>
    <span>
     <strong>
      <span>
       Performance Reporting:
      </span>
     </strong>
     <span>
      Weekly summaries of completed work, planned activities, risks, and discussion items.
     </span>
    </span>
   </span>
  </li>
  <li>
   <span>
    <span>
     <strong>
      <span>
       Vulnerability Mitigation Recommendations:
      </span>
     </strong>
     <span>
      Documented remediation and compensating control recommendations.
     </span>
    </span>
   </span>
  </li>
  <li>
   <span>
    <span>
     <strong>
      <span>
       Helpdesk Ticket Management:
      </span>
     </strong>
     <span>
      Creation and management of all vulnerability related tickets through closure.
     </span>
    </span>
   </span>
  </li>
  <li>
   <span>
    <span>
     <strong>
      <span>
       Documentation:
      </span>
     </strong>
     <span>
      Updated procedures and inventory documentation for the vulnerability management infrastructure.
      <br/>
     </span>
    </span>
   </span>
  </li>
 </ul>
 <span>
  <span>
   <span>
    #M1
    <br/>
   </span>
  </span>
 </span>
 <span>
 </span>
 <span>
 </span>
 <span>
  <br/>
 </span>
 <br/>
 &nbsp;
 <br/>
 <br/>
 <br/>
 <br/>
 <br/>
 System One, and its subsidiaries including Joul&eacute;, ALTA IT Services, and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.
 <br/>
 <br/>
 <br/>
 <br/>
 System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.
 <br/>
 <br/>
 <br/>
 <br/>
 <br/>
 Ref: #851-Rockville-S1
</div>


Qualys Vulnerability Management Analyst

Oasys

<div><div><b>Who We Are: </b>Oasys International LLC (Oasys) is a fast-growing federal government contractor delivering high-quality technology consulting and professional services to civilian, defense, and homeland security agencies. We have been recognized on Inc. 5000&rsquo;s list of the fastest-growing companies in America for five consecutive years and named a Best Places to Work in Virginia for the past two years.</div><div></div><div><br>
Our success is driven by a talented team of technologists, consultants, engineers, and subject-matter experts who support complex federal missions with integrity and excellence. At Oasys, we foster a collaborative, merit-based culture that values continuous learning, professional growth, and work-life balance. We are committed to creating an inclusive, engaging environment where employees are recognized for their contributions and empowered to build meaningful, long-term careers.</div><div></div><div><b><br>
Position Summary:</b></div><div>
The <b>Vulnerability Management Engineer</b> position supports vulnerability identification, analysis, remediation coordination, and compliance reporting for Federal systems. The role requires strong knowledge of federal cybersecurity frameworks, including NIST 800‑53, NIST 800‑37 RMF, FISMA, FedRAMP, and DoD‑specific controls. The Engineer will work with ISSOs, system owners, security architects, and engineering teams to ensure continuous visibility and reduction of security risks across mission‑critical environments. This role requires expertise in vulnerability scanning, assessment, automation, remediation tracking, and communicating risk to both technical and non‑technical federal stakeholders.</div><div></div><div><b><i><br>
NOTE: This role is contingent on the contract being awarded.</i></b></div><div></div><div><b><br>
Primary Responsibilities:</b></div><div><ul><li>
Plan, schedule, and execute vulnerability scans on federal systems using tools such as Tenable Nessus and Qualys.</li><li>
Analyze scan results, validate findings, eliminate false positives, and prioritize remediation based on criticality, exploitability, and federal impact levels.</li><li>
Support vulnerability discovery across cloud, on‑premises, hybrid, and containerized environments.</li><li>
Ensure vulnerability management activities align with NIST RMF, NIST 800‑53, DOD STIGs, FedRAMP, and agency‑specific guidelines.</li><li>
Contributes to the creation, maintenance, and tracking of POA&amp;Ms, ensuring compliance with federal deadlines and reporting requirements.</li><li>
Collaborate with ISSOs and system owners to support Security Control Assessments (SCAs) and audits.</li><li>
Work closely with system administrators, developers, network engineers, and cloud teams to drive timely remediation of vulnerabilities.</li><li>
Prepare compliance reports for federal leadership, auditors, ISSOs, and system owners.</li><li>
All other duties as assigned by management.</li></ul></div><div></div><div><b><br>
Skills and Qualifications:</b></div><div><ul><li>
Bachelor&rsquo;s degree in computer science or related field</li><li>
8+ years in Cybersecurity and Risk Management Framework</li><li>
Experience with vulnerability scanning tools (Nessus or Qualys)</li><li>
Experience performing risk assessments for Federal systems in AWS GovCloud</li><li>
Experience supporting FedRAMP High/Moderate systems</li><li>
Knowledge in Java, Python, HTML, SQL, CSS and cloud computing</li><li>
Excellent communication and management skills.</li></ul></div><div></div><div><b><br>
Certifications Required:</b></div><div><ul><li>
Certified Information Systems Security Professional (CISSP)</li><li>
CompTIA Security +</li></ul></div><div></div><div><b><br>
Security Clearance Requirements:</b></div><div><ul><li>
Must be a U.S. Citizen</li><li>
Must have an active DoD Secret clearance.</li></ul></div><div></div><div><b><br>
Work Location:</b></div><div><ul><li>
Fairfax, VA &ndash; Corporate Headquarters (Hybrid)</li></ul></div><div></div><div><b><i><br>
NOTE: This role is contingent on the contract being awarded.</i></b></div><div></div><div><b><i><br>
Oasys is proud to be an equal opportunity employer for all protected groups, including protected veterans and individuals with disabilities.</i></b></div></div>

Vulnerability Management Engineer

BigBear.ai

<div>Overview:
<p>
Vulnerability Researcher</p><p></p><p><br>
Location:On-Site (Annapolis Junction, MD)</p><p></p><p><br>
Clearance Required:TS/SCI with Poly</p><p></p><p><br>
Do you have a passion for uncovering hidden vulnerabilities and pushing the boundaries of cybersecurity research? Are you the kind of researcher who sees every system as a puzzle waiting to be solved? If so, BigBear.ai wants you on our team! We're seeking an elite <b>Vulnerability Researcher</b> that has an active TS/SCI with Poly clearance to join our cutting-edge team and deliver groundbreaking engineering and vulnerability research results that directly support national security missions. This is your chance to work on some of the most challenging and exciting research projects in the industry, discovering initial access capabilities and developing proof-of-concept exploits that make a real difference.</p>
What you will do:
<p>
Why This Role Is Unique</p><p></p><p><br>
This isn't your typical cybersecurity role. As a Vulnerability Researcher at BigBear.ai, you'll:</p><ul><li>
Work on classified, mission-critical research that directly impacts national security.</li><li>
Collaborate with elite teams of engineers and researchers who are passionate about pushing the boundaries of technology.</li><li>
Have the freedom to explore and innovate, discovering previously unknown vulnerabilities across hardware, software, and operating systems.</li><li>
See your research make a real difference in protecting national security interests.</li></ul><p></p><p><br>
What You'll Do</p><p></p><p><br>
In this role, you'll:</p><ul><li>
Hunt for Vulnerabilities: Actively debug software, troubleshoot crashes, and analyze programmatic flow to uncover hidden security flaws in hardware components, software applications, and operating systems.</li><li>
Analyze Source Code: Perform in-depth source code analysis to discover software vulnerabilities and author detailed documentation on the impact and severity of each finding.</li><li>
Develop Proof-of-Concept Exploits: Create and demonstrate compelling proof-of-concept exploits against research targets, prototypes, and hands-on demonstrations of vulnerability analysis results.</li><li>
Present Your Findings: Author and deliver engaging technical presentations on assigned projects to stakeholders and leadership, showcasing the impact of your research.</li><li>
Drive Innovation: Push the boundaries of vulnerability research by discovering previously unknown vulnerabilities across multiple versions of similar technologies.</li></ul>
What you need to have:
<ul><li>Clearance: TS/SCI with Poly (required).</li><li>
Experience: 10+ years of technical experience and a B.S. in a technical discipline. (4 additional years may be substituted in lieu of a degree.)</li><li>
Programming Expertise: Minimum of 4 years of experience programming in Assembly, C, C#, C++, Perl, or Python in a production environment.</li><li>
Technical Background:<ul><li>
Minimum of 5 years of contiguous experience in computer science, information systems, or network engineering, OR</li><li>
Bachelor's Degree in Computer Science or a related field plus a minimum of 3 years of contiguous experience.</li></ul></li><li>
Reverse Engineering: Minimum of 4 years of demonstrated experience in hardware or software reverse engineering.</li><li>
Communication Skills: Demonstrated experience creating and delivering compelling technical presentations to diverse audiences.</li><li>
Education: Bachelor's Degree in Computer Science or a related field, OR minimum of 2 years of experience in computer science, information systems, or network engineering.</li></ul>
What we'd like you to have:<br>
<div></div><ul><li>
Proven Track Record: Demonstrated ability to discover multiple previously unknown vulnerabilities across multiple versions of similar technologies &mdash; the more obscure, the better!</li><li>
Innovative Mindset: A relentless passion for pushing the boundaries of vulnerability research and developing creative solutions to the most complex challenges.</li><li>
Collaborative Spirit: A desire to share knowledge and collaborate with a team of like-minded researchers who are equally passionate about cybersecurity.</li></ul>
About BigBear.ai:
<div>
BigBear.ai is a leading provider of AI-powered decision intelligence solutions for national security, supply chain management, and digital identity. Customers and partners rely on Bigbear.ai&rsquo;s predictive analytics capabilities in highly complex, distributed, mission-based operating environments. Headquartered in McLean, Virginia, BigBear.ai is a public company traded on the NYSE under the symbol BBAI. For more information, visit https://bigbear.ai/ and follow BigBear.ai on LinkedIn: @BigBear.ai and X: @BigBearai.</div><div></div><div><br>
BigBear.ai is an Equal opportunity employer all protected groups, including protected veterans and individuals with disabilities.</div></div><div></div>

Vulnerability Researcher

Sumaria Systems

<div><p><b>Job Title: </b>Information Assurance II (Vulnerability Assessment Analyst &ndash; ACAS Security Manager)</p><p><b>
Job Description: </b>Information Networks are critical to modern warfare. This position plays a critical role in our nation&rsquo;s defense through the operation, management and defense of the Air Force portion of the Department of Defense Information Network. In this role, you will maintain network infrastructure, to include routers, switches, proxies, firewalls, servers, workstations, printers, Storage Area Networks (SAN) and test labs, to provide maneuverability and defense of both classified and unclassified networks. This is expected to include, but not necessarily be limited to, the following activities:</p><ul><li>
Measure effectiveness of defense indepth architecture against known vulnerabilities using available tools within organization to find them. Analyze, prioritize, and mitigate vulnerabilities to lower or eliminate risk.</li><li>
Perform/review/validate vulnerability scans to include analysis of results, identification of false positives, exceptions, and subsequent POA&amp;Ms and/or MFRs creation, monitoring and reporting to include POA&amp;M status and contributions to Monthly and Quarterly reports.</li><li>
Collects and reviews data gathered from a variety of tools (including intrusion detection system alerts, firewall, network traffic logs, and host system logs) to analyze events for possible attacks that occur within computing, network, or enclave environments.</li><li>
Validates, investigates, and analyzes all response activities related to cyber incidents. These tasks include but are not limited to: creating and maintaining incident tracking information; planning, coordinating, and directing recovery activities; and incident tracking information; and incidents analysis tasks, including examining all available information and supporting evidence of artifacts related to an incident or event.</li><li>
Performs assessments of systems and networks within the network environment or enclave and identify where those systems and/or networks deviate from acceptable configurations, enclave policy, or local policy.</li><li>
Create reports to effectively communicate to government problems and proposed solutions.</li><li>
Actively manage (inventory, track, and request corrective action) all hardware devices on network that only authorized devices are given access and unauthorized and unmanaged devices are found and prevented from gaining access.</li><li>
Actively manage (inventory, track, and correct) all software on the network so that only authorized software is installed and can execute, and that unauthorized and unmanaged software is found and prevented from installation or execution.</li><li>
Submit tickets to appropriate teams for corrective actions.</li><li>
Other cybersecurity related tasks, as assigned.</li></ul><p><b>
Required Skills/Education:</b></p><p><b>
Education: </b>High School Diploma or GED</p><p><b>
Certification Requirements:</b> DoDD 8140 IAT-II; DISA ACAS Supervisor and Operator Course and DISA Forescout Comply to Connect (C2C) Certified Administrator Training (FSCA) AND Security + or CEH.</p><p><b>
Years of Experience:</b> 3+ years of experience in utilizing security relevant tools to include: NESSUS, ACAS, DISA STIGs, Audit Tools, Forescout, ESS, Performs assessments of system and network and identifies where the system/network deviate from acceptable configurations, DoD policy, or local policy/guidelines.</p><p><b>
Travel: </b>Yes (less than 10%)</p><p><b>
Security Clearance Required: </b>Secret</p><p><b>
Position Type:</b> Full Time</p><p><b>
Work Location: </b>Maxwell AFB, Gunter Annex, AL</p><p><b>
# Openings:</b> 1</p><p>
Expected salary range is $75,0000 to $80,000</p><p>
Agency submissions are not being accepted at this time.</p><p>
For more information on Sumaria Systems, please visit our website at www.sumaria.com.</p><p>
Sumaria is an equal opportunity employer and considers qualified applicants for employment without regard to race, color, creed, religion, national origin, sex, sexual orientation, gender identity and expression, age, disability, or protected veteran status.</p><p>
Sumaria is a Full Lifecycle Engineering, Technical Services and Professional Solutions company in support of the Warfighter, supporting modernization, high end services and next generation capabilities in contested domains. Sumaria has been a trusted partner to U. S. Department of Defense for more than 40 years, providing Lifecycle Systems Engineering, Advisory &amp; Analysis/SETA, C5ISR and Enterprise Information Technology solutions. With expertise to lead, insight to deliver and commitment to succeed; we staff each mission with a carefully selected team of seasoned professionals. We're Headquartered in Peabody, MA, and have regional offices across the nation.</p><p>
Sumaria Systems only provides engineering services to the federal government and does not provide professional engineering or surveying services to the public within the meaning of Ohio Revised Code Section 4733.16.</p></div>

Information Assurance II

Foxhole Technology

<div>Overview:
<div><b>
Title: Assess and Authorize (A&amp;A) Analyst</b></div><div><b>
Location: Fully Remote</b></div><div><b>
Clearance: Secret</b></div><div></div><p><br>
Foxhole Technology provides robust cybersecurity and IT support capabilities for federal civilian and defense agencies. A recognized leader in navigating technology and security challenges, Foxhole delivers mission-focused innovations to answer evolving and complex needs. Our talented employee-owners provide agile, scalable services and solutions that solve operational gaps, operate critical systems, and protect and secure the enterprise &ndash; across the organization and around the world.</p><p></p><p><br>
The Assess &amp; Authorize (A&amp;A) Analyst supports a DoD customer Cybersecurity Assess &amp; Authorize function to ensure information systems and technologies are assessed and authorized by the Authorizing Official (AO) prior to introduction and operation on the network. This role provides Information System Security Officer (ISSO)-equivalent support by executing the DoD Risk Management Framework (RMF) in accordance with DoDI 8510.01, NIST SP 800-37, and NIST SP 800-30, and by developing and managing authorization packages and continuous monitoring artifacts in eMASS. The analyst supports multiple system authorizations and contributes to cybersecurity reporting and metrics, including maintaining network connection approvals via SNAP.</p>
Job Description:
<ul><li>Execute RMF activities and provide ISSO / ISSO-equivalent A&amp;A support for assigned systems across the system lifecycle (assessment, authorization, operations, and continuous monitoring).</li><li>
Support multiple Authorization to Operate (ATO), Authorization to Use (ATU), and Assess Only packages annually (approximately seven (7) authorization packages per year).</li><li>
Develop, maintain, and submit complete RMF Executive Packages for each authorization, including:</li><li>
System Security Plan (SSP)</li><li>
Security Assessment Report (SAR)</li><li>
Risk Assessment Report (RAR)</li><li>
Plan(s) of Action and Milestones (POA&amp;M)</li><li>
Authorization Decision Document</li><li>
Register systems within the Enterprise Mission Assurance Support Service (eMASS) and use eMASS to support and automate RMF documentation, workflows, and reporting.</li><li>
Manage and maintain system authorization artifacts in eMASS, ensuring accurate documentation of:</li><li>
Security controls and implementation status.</li><li>
Inheritance and shared control relationships.</li><li>
Risk posture and supporting evidence.</li><li>
POA&amp;M creation, updates, and tracking.</li><li>
Authorization status and lifecycle updates.</li><li>
Coordinate with system owners, ISSMs, assessors, engineers, and AOs to support:</li><li>
Assessment planning and execution.</li><li>
Remediation and risk mitigation activities.</li><li>
Risk acceptance decisions and authorization outcomes.</li><li>
Ongoing continuous monitoring activities.</li><li>
Register and maintain all system/application connections in the Systems Network Approval Process (SNAP).</li><li>
Produce and deliver monthly and annual SNAP registration metrics.</li><li>
Support cybersecurity compliance, audit readiness, and reporting to ensure systems and technologies remain in an approved security posture.</li></ul>
Minimum Requirements:
<ul><li>Active Secret security clearance</li><li>
3-7 years of relevant cybersecurity / RMF / A&amp;A experience</li><li><div>
Core Tools and Knowledge<b>: </b>eMASS, DoDI 8510.01, NIST SP 800-37, NIST SP 800-30</div></li><li>
DoD IAM Level III certification (one of the following): CISM, CISSP (or Associate), GSLC,CCISO</li></ul>
More Information:
<p>
Requirements of position: Think analytically, effective verbal and written communication skills, make decisions, observe/remember details, interpret data, concentrate on tasks, adjust to change, handle stress/emotions. Regular attendance, maintain work schedule, attend meetings, meet deadlines, keyboard/type, handle confidential information, use math/calculations, stay organized, operate office equipment, may direct others. May be exposed to dust/dirt, humidity, and noise.</p><p></p><p><br>
Foxhole Technology is an Equal Opportunity Employer and makes hiring decisions without regard to race, color, religion, sex (including pregnancy, childbirth and sexual orientation), national origin, age, disability, genetic information, military/veteran status, or any other protected class.</p></div>

Assess and Authorize (A&A) Analyst

City National Bank

<div><div><b>RISK ANALYST RLD</b></div><div><b><br>
WHAT IS THE OPPORTUNITY?</b></div><div>
This role will primarily be responsible for the execution of the first line of defense Risk Program, including the enhancement of internal controls and in performing internal controls monitoring and testing. In addition, will support the coordination, preparation of documents and responses for compliance testing, internal and external audits and regulatory examinations, and will assist in the maintenance policies and procedures overall.</div><div><b><br>
WHAT WILL YOU DO?</b></div><div><ul><li>
Support the identification of opportunities for improvement through the internal control monitoring and testing function, and work with team managers to enhance processes in order to mitigate key risks.
</li><li>Monitor all open issues until satisfactorily resolved. Escalate status as warranted. Conduct formal follow-up to determine the adequacy and effectiveness of actions taken. Prepare reports of results for senior management.
</li><li>Support state, federal and agency examinations, including to manage the compilation of necessary documents, writing of required narratives and establishment of documented policies and procedures. Assist with performing qualitative review of information provided in response to examinations to ensure responses are consistent, and accurate.
</li>Perform ad hoc operational risk-related projects as directed.<br>
<li>
</li></ul></div><br>
<div><b>WHAT DO YOU NEED TO SUCCEED?</b><br>
</div><div><b>
Required Qualifications*</b><ul><li>
H.S. Diploma
</li><li>Minimum of 3 years&rsquo; experience in audit, regulatory examination, compliance testing, or similar capacity;
</li><li>Minimum of 3 years' experience within the banking and financial sector, with a focus on Federal and State laws, regulations, and supervisory guidance, risk management, or a combination of these disciplines within support functions such as Risk Management / Compliance Governance Programs, Human Resources, Finance, Legal, etc.
</li></ul><div></div><div><div><b>Additional Qualifications</b></div><ul><li>
Prefer a minimum of 1 years of experience working with commercial banking or residential lending products</li><li>
Strong presentation and written communications skills; ability to interact with and influence senior executive management across the organization in order to achieve best practices and optimal business outcomes;</li><li>
Corporate Compliance, Risk Management, Regulatory or Compliance Audit experience with a regulated financial institution</li><li>
Exposure to commercial banking products is preferred if working with SBC CLO products</li><li>
Demonstrated ability to develop and maintain cooperative, collaborative, and productive business partnerships;</li><li>
Excellent oral, written and interpersonal communication skills with the ability to provide clear guidance understand procedures, interpret regulations.</li><li>
Self-directed individual with a strong ability to work independently;</li><li>
Excellent problem solving, time management and organizational skills</li></ul></div><div><b><br>
WHAT'S IN IT FOR YOU?</b></div><div><b>
Compensation</b><div>
Starting base salary: $34.55 - $55.19 per hour. Exact compensation may vary based on skills, experience, and location. This job is eligible for bonus and/or commissions.</div></div><div><b><br>
Benefits and Perks</b></div><div>
At City National, we strive to be the best at whatever we do, including the benefits and perks we offer our colleagues including:<ul><li>
Comprehensive healthcare coverage, including Medical, Dental and Vision plans, available the first of the month following start date</li><li>
Generous 401(k) company matching contribution</li><li>
Career Development through Tuition Reimbursement and other internal upskilling and training resources</li><li>
Valued Time Away benefits including vacation, sick and volunteer time</li><li>
Specialized health and family planning benefits including fertility benefits, and cancer, diabetes and musculoskeletal support programs</li><li>
Career Mobility support from a dedicated recruitment team</li><li>
Colleague Resource Groups to support networking and community engagement</li></ul><div>
</div><div>Get a more detailed look at our Benefits and Perks.</div></div><div><b><br>
ABOUT US</b></div><div>
Since day one we've always gone further than the competition to help our clients, colleagues and communities flourish. City National Bank was founded in 1954 by entrepreneurs for entrepreneurs and that legacy of integrity, community and unparalleled client relationships continues today. City National is a subsidiary of Royal Bank of Canada, one of North America&rsquo;s leading diversified financial services companies. To learn more about City National and our dynamic company culture, visit us at About Us.</div><div><b><br>
INCLUSION AND EQUAL OPPORTUNITY EMPLOYMENT</b></div><div>
City National Bank fosters an inclusive environment where all forms of diversity are valued and leveraged to make us a better company and employer. We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sexual orientation, gender identity, national origin, disability, veteran status or other basis protected by law.<br>
<br>
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.<br>
<br>
<ul><li>Represents basic qualifications for the position. To be considered for this position, you must at least meet the required qualifications. careers.cnb.com accepts applications on an ongoing basis, until filled.</li></ul><br>
Unless otherwise indicated as fully remote, reporting into a designated City National location is an essential function of the job.</div></div></div>

Vendor Risk Analyst

Search 10000+ Vulnerability assessment analyst jobs near you this March. New roles added regularly across leading industries. Apply today.