Vulnerability Management / Cyber Operations Analyst

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Vulnerability Management / Cyber Operations Analyst based in the United States.

As a Vulnerability Management / Cyber Operations Analyst, you will play a critical role in strengthening cybersecurity operations and protecting sensitive information within a federal agency environment. You will oversee vulnerability assessments, investigate potential security threats, and coordinate remediation efforts to reduce organizational cyber risks. Working closely with infrastructure, application, and security teams, you will help identify weaknesses, respond to incidents, and improve overall security resilience. You will also contribute to the development of cybersecurity tools, policies, and technical standards while supporting initiatives such as Zero Trust architecture and advanced encryption. This role combines vulnerability management, threat analysis, incident response, and digital forensics in a mission-critical environment. The position is fully remote and offers the opportunity to make a meaningful impact on federal cybersecurity and information protection.

Accountabilities

• Conduct vulnerability scans across enterprise systems and infrastructure, analyzing and validating identified weaknesses to determine their severity and potential impact.
• Prioritize vulnerabilities and remediation activities in accordance with federal Binding Operational Directive (BOD) guidance and applicable cybersecurity requirements.
• Coordinate remediation efforts with infrastructure and application teams, verify corrective actions, and ensure vulnerabilities are properly resolved and closed.
• Document false positives, manage risk acceptance processes, and coordinate vulnerability reporting to maintain accurate security records.
• Monitor network traffic, system logs, audit logs, and security alerts to identify suspicious activities and potential security incidents.
• Investigate suspected and confirmed security breaches, perform root-cause analysis, identify attack pathways, and determine the full scope and impact of threats across affected systems.
• Support threat intelligence analysis, digital forensics, and incident response activities, providing rapid technical assistance during security breaches and system failures.
• Develop cybersecurity intelligence tools, automated methods, and analytical approaches to identify, mitigate, and eliminate information security risks.
• Design and establish cybersecurity architecture acceptance criteria to ensure systems meet applicable security requirements.
• Support ongoing cybersecurity initiatives involving audit logging, Zero Trust architecture, encryption, and other advanced security controls.
• Conduct periodic security and audit reviews across systems, monitor corrective action plans, and ensure all identified findings are addressed and formally closed.
• Document security events, prepare detailed incident reports, and provide recommendations for security improvements and technology upgrades to management.
• Develop and maintain cybersecurity standards, policies, and best practices for employees and technical teams.
• Communicate security risks, technical findings, and cybersecurity guidelines clearly to both technical and non-technical stakeholders.
• Collaborate with relevant teams to strengthen security governance, improve incident response capabilities, and maintain compliance with federal cybersecurity requirements.

Requirements:

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent relevant professional experience.
• Between 5 and 10 years of professional experience in systems security, cybersecurity operations, vulnerability management, or a closely related discipline.
• Relevant industry certifications such as CompTIA Security+, Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP), or equivalent application and security vendor certifications.
• Strong understanding of network protocols, operating systems, including Windows and Linux, and enterprise cybersecurity technologies.
• Practical knowledge of Security Information and Event Management (SIEM) solutions and security monitoring tools.
• Familiarity with vulnerability assessment platforms, particularly Tenable Security Center and Nessus scanners.
• Good understanding of federal cybersecurity policies, regulations, and guidance, including Office of Management and Budget (OMB) requirements, Executive Orders, and the NIST Special Publication 800 series.
• Advanced knowledge of encryption technologies, vulnerability assessments, penetration testing methodologies, cyber forensics, intrusion detection, incident response, and security remediation.
• Experience analyzing security events, investigating potential threats, identifying root causes, and coordinating incident resolution.
• Scripting and automation skills, including the ability to integrate security tools, develop dashboards, and streamline cybersecurity operations.
• Strong knowledge of cybersecurity governance, policy development, operational processes, and technical documentation.
• Excellent analytical and problem-solving abilities, with exceptional attention to detail and the capacity to manage multiple priorities simultaneously.
• Strong written and verbal communication skills, including the ability to explain complex technical risks and security recommendations to diverse audiences.
• Must be a U.S. citizen with no dual citizenship, in accordance with agency requirements.
• Must be able to successfully pass a federal background investigation to obtain access to sensitive information.

Benefits:

• Competitive annual salary ranging from $135,000 to $170,000, depending on experience and qualifications.
• Fully remote working arrangement, with the flexibility to work from anywhere in the United States.
• Full-time opportunity supporting important federal cybersecurity and information protection initiatives.
• Opportunity to work on advanced vulnerability management, threat detection, incident response, and digital forensics activities.
• Exposure to federal cybersecurity frameworks, security technologies, and enterprise-scale infrastructure.
• Opportunity to contribute to critical security initiatives, including Zero Trust architecture, encryption, and risk mitigation.
• Professional growth through hands-on experience with advanced cybersecurity tools, technologies, and methodologies.
• Collaborative environment involving cybersecurity specialists, infrastructure teams, and technical stakeholders.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether?    Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.     #LI-CL1