Vulnerability and Exposures Analyst

Description Owns exposure-management strategy, governs exception review processes, and drives program-level metrics and continuous improvement.

Key Responsibilities

• Define exposure-management strategy and scanning cadence
• Govern the risk-acceptance and exception review process
• Develop and report program-level vulnerability metrics
• Lead root-cause analysis for recurring exposure classes
• Advise stakeholders on remediation prioritization at the portfolio level

Requirements Minimum Qualifications

• Education: Bachelor's Degree (Master's a plus)
• Experience: 7+ years in vulnerability/exposure management
• Certifications: CISSP (required), GIAC GPEN or OSCP (preferred)

About Xsi Xtreme Solutions, Inc. is committed to supporting a variety of programs. Our broad range of IT expertise addresses our clients’ needs by providing industry leading, state-of-the-art information technology and cyber security services and solutions.

We focus on delivering business solutions that exceed our customers’ vision, mission, and long-term goals while focusing on emerging trends and information technologies.

Equal Employment Opportunity Xtreme Solutions, Inc. is an Equal Opportunity Employer. XSI does not discriminate in employment on the basis of race, color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, age, disability, genetic information, veteran status, or any other status protected by applicable federal, state, or local law. All qualified applicants will receive consideration for employment without regard to these protected characteristics.

Contingent Upon Contract Award Every position described in this document is contingent upon Xtreme Solutions, Inc.'s award of Contract BPM057598 (Statewide Cybersecurity Resources, State of Maryland Department of General Services), and the subsequent issuance of a Work Order requiring the applicable labor category. No offer of employment, start date, or compensation commitment will be extended prior to Contract award and Work Order issuance. Candidates will be advised of contingent status throughout the recruiting and screening process.