Vulnerability Analyst

📋 Description

• Manage POA&M lifecycle with 3PAO assessors and federal stakeholders.
• Collect and maintain security evidence for monthly FedRAMP/HITRUST/PCI reviews.
• Maintain system inventory and authorization boundaries for scanning scope.
• Analyze scan results for false positives; justify deviations.
• Translate vulnerabilities into risk language for federal clients; provide status updates.
• Collaborate with Dev/SRE/infra to integrate vulnerability mgmt into CI/CD and cloud/Kubernetes.

🎯 Requirements

• 3–5 years in vulnerability management, compliance monitoring, or security operations.
• Hands-on vulnerability mgmt across OS, DB, networks, containers, and web apps.
• Direct experience in at least two cloud providers: AWS, Azure, or GCP.
• Background in FedRAMP, HITRUST, or PCI with risk assessment and reporting.
• Experience delivering monthly vulnerability status reports and remediation tracking.
• Bachelor's degree or equivalent; administrator-level cert in AWS, Azure, or GCP.

🎁 Benefits

• Flexible work model: work from home or an office.
• Certification/training reimbursement; paid parental leave; wellbeing support.
• Comprehensive insurance options and wellbeing programs.