Risk and Vulnerability Analyst

Title

Risk and Vulnerability Analyst

Location

Richmond, VA

Duration

12+ Months

**Role requires 2-3 days ON SITE each week for this reason local Richmond candidates will be considered first**

Job Description

• Perform vulnerability assessments and assist security scanning across operating systems, databases, web applications, and enterprise infrastructure
• Analyze vulnerabilities and support development of remediation recommendations
• Support cloud compliance scans and assessment activities
• Help troubleshoot scanning issues and support maintenance of vulnerability scanning tools, consoles, and configurations
• Support automated and scheduled scanning activities, including scan planning, execution, and reporting Support ad hoc or emergency vulnerability scanning in support of incident investigation
• and response activities
• Create and maintain scan reports, data feeds, scan policies, repositories, and user access/roles for assessment tools
• Support API discovery and scanning, and integration of assessment data into thirdparty tools
• Coordinate with SCC Security Operations team to support tool operations, testing, and vulnerability management activities

Skills

• Information Security-related experience
• Software Vulnerability Management related experience
• Experience troubleshooting vulnerability scan tools and scan configurations
• Experience with automation supporting vulnerability assessment operations
• Experience supporting Information System Vulnerability Management (ISVM) scans and compliance activities
• Experience with API discovery and security scanning
• Experience and proficiency with Microsoft, SharePoint and Power BI
• Proven analytical and problemsolving abilities
• Excellent verbal and written communication skills
• Ability to work independently with minimal direction and as a team
• Highly motivated and self-directed