Vulnerability Analyst (Cybersecurity)

TL;DR

Vulnerability Analyst (Cybersecurity): Directing vulnerability scanning activities and developing management strategies for the National Institutes of Health (NIH) with an accent on risk-based prioritization and federal compliance. Focus on reducing enterprise cybersecurity risk, coordinating remediation efforts, and ensuring SLA compliance within a Federal environment.

Location: Remote (Must be able to obtain and maintain US Public Trust clearance)

Company

hirify.global Incorporated is a software and services provider supporting federal agencies such as the National Institutes of Health (NIH).

What you will do

• Direct vulnerability scanning activities and develop enterprise management strategies across NIH systems.
• Analyze scan results and perform prioritization using risk-based methodologies to identify critical vulnerabilities.
• Conduct root cause analysis and validate corrective actions to ensure effective remediation.
• Coordinate remediation efforts with System Owners and monitor SLA compliance.
• Develop executive cybersecurity reports to track vulnerability trends and recurring issues.
• Support risk acceptance processes to reduce overall enterprise cybersecurity risk.

Requirements

• Active Public Trust Clearance or the ability to obtain one.
• B.S. in Computer Science, Information Technology, or a related field.
• 7+ years of experience with vulnerability assessments or vulnerability management programs.
• Experience managing enterprise vulnerability scanning solutions and conducting penetration testing.
• Experience supporting Federal cybersecurity programs with knowledge of RMF, FISMA, and NIST guidance.
• Ability to obtain and maintain NIH suitability and background investigation.