Vulnerability Management Analyst

Job Title

SCC - Vulnerability Management Analyst

Location

Richmond, VA (Hybrid)

Job Description

SCC - Vulnerability Management Analyst
ON SITE: 2-3 days/week. Parking is NOT provided for contractors.

ABOUT THE ROLE:

The State Corporation Commission (SCC) is seeking a Risk and Vulnerability Analyst to support vulnerability assessment and risk analysis activities at the SCC. This role is responsible for conducting vulnerability scanning and analysis, supporting remediation efforts, supporting scanning operations, and helping improve enterprise visibility into security weaknesses and cyber risks.

Responsibilities Include:

• Perform vulnerability assessments and assist security scanning across operating systems, databases, web applications, and enterprise infrastructure
• Analyze vulnerabilities and support development of remediation recommendations
• Support cloud compliance scans and assessment activities
• Help troubleshoot scanning issues and support maintenance of vulnerability scanning tools, consoles, and configurations
• Support automated and scheduled scanning activities, including scan planning, execution, and reporting
• Support ad hoc or emergency vulnerability scanning in support of incident investigation and response activities
• Create and maintain scan reports, data feeds, scan policies, repositories, and user access/roles for assessment tools
• Support API discovery and scanning, and integration of assessment data into third-party tools
• Coordinate with SCC Security Operations team to support tool operations, testing, and vulnerability management activities

Required/Desired Skills

Skill

Required /Desired

Amount

of Experience

Information Security-related experience

Required

5

Years

Software Vulnerability Management related experience

Required

3

Years

Experience troubleshooting vulnerability scan tools and scan configurations

Required

3

Years

Experience with automation supporting vulnerability assessment operations

Required

3

Years

Experience supporting Information System Vulnerability Management (ISVM) scans and compliance activities

Required

3

Years

Experience with API discovery and security scanning

Required

3

Years

Experience and proficiency with Microsoft, SharePoint and Power BI

Required

5

Years

Proven analytical and problem-solving abilities

Required

5

Years

Excellent verbal and written communication skills

Required

5

Years

Ability to work independently with minimal direction and as a team

Required

5

Years

Highly motivated and self-directed

Required

5

Years

Questions

No.

Question

Question1

Commonwealth of Virginia security policies prohibit the use of offshore IT contractors. Do you attest to the fact that your candidate will physically reside within the US for the duration of the assignment?

Question2

What is your candidate’s email address?

Question3

In what city and state does your candidate CURRENTLY reside?

Question4

Experience supporting Information System Vulnerability Management (ISVM) scans and compliance activities is REQUIRED. It would be extremely helpful if you would HIGHLIGHT this on your candidate's resume in order for us to quickly find and confirm the level of their experience.

Question5

Software Vulnerability Management related experience is REQUIRED for this role. Pls HIGHLIGHT any related experience on your candidates resume that supports this experience.

Question6

Role requires 2-3 days ON SITE each week for this reason local Richmond candidates will be considered first. If selected - does your contractor agree to this ON SITE arrangement?

Pay: $92,000.00 - $111,000.00 per year

Work Location: In person