Job Description
Job DescriptionDescription:
Position Summary
Runs and analyzes automated vulnerability scans across servers, workstations, web applications, and general devices, then validates, filters, and prioritizes results into actionable, management-ready findings.
Key Responsibilities
• Configure and run vulnerability scanning tools without causing system disruption or service degradation.
• Validate scan results, eliminate false positives, and prioritize critical/high/moderate findings.
• Produce both filtered curated reports and raw/unfiltered native scan output as required by the RFP.
• Document whether tools used are commercial, proprietary, or open source.
Requirements:
Required Qualifications
• 3+ years of vulnerability management or scan analysis experience.
• Proficiency with enterprise vulnerability scanners (Tenable/Nessus, Qualys, Rapid7, or equivalent).
• Strong analytical skills for false-positive triage and risk prioritization.
Preferred Qualifications
• GVMA, CompTIA PenTest+, or Security+ certification.
• Experience coordinating scan timing with client IT teams to minimize operational impact.
Travel
Fully remote; must remain within the continental United States.