38 cyber security vulnerability management analyst jobs at 29 companies in United States
3d
Save
Mark Applied
Hide
3d
Sr Cyber Security Vulnerability Management Analyst
Baltimore or Houston or Houston
$123k-$137k/yrHybridFull Time
Constellation Energy Generation, LLC: Private U.S. power generator and energy supplier serving wholesale, retail, commercial, public-sector, and residential customers.
5+ YOEBachelor's in Information Systems and 5 years' experience, or 9 years without a degree; 2 years in Agile, application security, or DevOps; expertise in vulnerability assessment, cloud, DevSecOps, and security tools.
Microsoft Azure, Google Cloud Platform (GCP), Amazon Web Services (AWS), Docker, Kubernetes, Chef, Terraform, Jenkins, GitHub, TeamCity, Fortify, ShiftLeft, Checkmarx, Invicti, WhiteSource, Jira, ServiceNow, GitLab, Bitbucket, Unix, SAST, DAST, IAST, SCA, OSA, CI/CD, DevOps, SCADA, ICS, Distribution Automation, Smart Grid, DMS, ECS, SDL, Active Directory, SQL, LDAP, Microsoft SharePoint, Cisco, IDS/IPS, SSL, TLS, IPSec, APIs, Azure AD, Agile
Loenbro: Industrial services contractor for critical infrastructure and energy markets.
5+ YOERequires 5–10+ years in cybersecurity or information security, vulnerability program management, incident response, change management, risk reporting, and infrastructure, cloud, networking, and endpoint technologies.
Tenable, CrowdStrike Falcon, Windows, Linux, Active Directory, Azure AD, Entra ID, MDR, Threat Intelligence, ticketing systems, change management systems
GarminNYSE: GRMN: Global provider of navigation, communications, and information technology devices.
1+ YOEBachelor's degree in a related field and 1+ year relevant experience or equivalent; vulnerability management, CVSS/NVD familiarity, defensive security, communication, analysis, and multitasking skills.
Common Vulnerability Scoring System (CVSS), National Vulnerability Database (NVD), NIST 800-53, NIST Cybersecurity Framework (CSF), Security Information and Event Management (SIEM), Windows, Linux, Unix, Python, JavaScript, PowerShell, C#, Perl
General Dynamics Information TechnologyNew York Stock Exchange: GD: Provider of enterprise IT services and defense solutions.
8+ YOERequires 8+ years of related experience, US citizenship, TS/SCI clearance, vulnerability management expertise, Linux/Red Hat, Tenable Security Center, cloud environments, and cybersecurity tools.
Tenable Security Center, Linux, Red Hat, AWS, Microsoft Azure, Google Cloud, Microsoft Defender for Endpoint, Splunk, Elastic, Endpoint Detection and Response (EDR), ServiceNow, Remedy, Microsoft Excel
DecisionPoint Corporation: Federal IT and management services for government agencies.
5+ YOEActive Top Secret clearance, bachelor’s degree, 5+ years in vulnerability management or cyber ops, ACAS/Nessus experience, Security+ required, ACAS Certification and CEH preferred, familiarity with RMF, STIGs, POA&Ms.
Type One Energy: Private fusion technology provider developing stellarator systems for utilities, energy producers, and data centers.
1+ YOE1–3 years IT/security experience; familiarity with SIEM, EDR, vulnerability management; scripting with PowerShell or Python; experience with Microsoft Entra ID/Intune; CompTIA Security+ preferred.
SIEM, PowerShell, Python, Microsoft Entra ID, Intune, Microsoft Purview
Paterson Public Schools: Public school district serving Paterson students.
Bachelor of Science in Engineering or Computer Science (or equivalent experience). Experience with security assessment tools, vulnerability scanning, penetration testing, network and server management, and security platforms. Strong communication and problem-solving skills.
NMAP, Procmon, Azure, GCP, AWS, VMWare, Palo Alto, Cisco, Avaya, Extreme, HP, MS Exchange, Office 365, Microsoft Windows, Microsoft Server, Mac OS, Linux, IOS, Android, ChromeOS
FCS Financial: Member-owned Missouri agricultural lender providing loans, leases, insurance, appraisals, and related services to rural borrowers.
5+ YOEBachelor's degree or equivalent experience and 5 years of related experience. Requires cybersecurity, incident response, threat detection, vulnerability management, and security monitoring expertise.
Security Information and Event Management (SIEM), Intrusion Detection/Prevention Systems (IDS/IPS), Public Key Infrastructure (PKI), Identity and Access Management (IDAM), Antivirus, Firewalls, Endpoint Detection and Response (EDR), Threat Intelligence Platforms, Data Loss Prevention (DLP)
Snoqualmie Casino & Hotel: Tribal-owned casino and hotel serving guests with gaming, dining, spa, entertainment, and luxury accommodations.
4+ YOEBachelor's in cyber security/CS/IT or equivalent; 4 years cybersecurity experience; CompTIA Security+ required or obtained within 6 months; experience with incident response, vulnerability management, SIEM/IDS/IPS and regulatory compliance.
Trinnex: Global engineering and construction firm providing integrated infrastructure solutions.
6+ YOEBachelor’s degree or equivalent experience and 6 years of relevant cybersecurity experience. Requires security frameworks, incident response, vulnerability management, IaC, and cloud-native security expertise.
Infrastructure as Code (IaC), Mend, Software Composition Analysis (SCA), Google Cloud Platform (GCP), Kubernetes, CI/CD, Terraform
Battelle Savannah River Alliance, LLC: U.S. Department of Energy applied research laboratory advancing national security, environmental stewardship, and energy resilience.
2+ YOEBachelor's degree and 2–4 years of relevant experience. Requires security architecture, vulnerability assessment, STIG, risk management, and security framework expertise; US citizenship and ability to obtain a clearance.
UW Medicine: Public academic health system providing patient care, medical research, and health-professions education across five states.
6+ YOE1+ MgmtBachelor's or equivalent,6+ years information security experience,1+ year mentoring,experience with risk/vulnerability management,knowledge of NIST/HIPAA/ISO/PCI/SOC,security tool development and service delivery.
NIST 800-53, NIST CSF, ISO 27001, ISO 27002, HIPAA, PCI DSS, SOC
OmniTRAX: Private family-owned railroad management serving industrial shippers with freight rail, switching, transloading, and real estate.
4+ YOEBachelor’s degree or equivalent,4+ years cybersecurity experience,hands-on experience with endpoint, identity, email, cloud, SIEM, and vulnerability management,strong troubleshooting and communication skills.
Microsoft Defender, Barracuda, Okta, Entra ID, TrendMicro, Active Directory, Azure, Microsoft 365
P3S Corporation: Woman-owned federal contractor providing IT, financial management, and public-health program services to Defense and other government agencies.
7+ YOERequires U.S. citizenship and active Secret clearance or ability to obtain; DoD 8140/8570 IAM or IAT baseline certification within 6 months; bachelor’s degree or equivalent; 7+ years cybersecurity experience with RMF, eMASS, vulnerability management, and DoD/Air Force environments.
eMASS, ACAS, Nessus, Tenable.io, Qualys, Splunk, QRadar, SolarWinds SEM, Trellix/HBSS, CrowdStrike Falcon, Microsoft Defender, McAfee Endpoint Security, Windows Server, Linux, VMware, Citrix, Active Directory, Azure Active Directory, DB2, IBM WebSphere, PowerShell, Python, Bash
P3S Corporation: Woman-owned federal contractor providing IT, financial management, and public-health program services to Defense and other government agencies.
7+ YOEMust possess U.S. citizenship, active Secret clearance or ability to obtain, meet DoD 8140/8570 certification baseline within 6 months, bachelor\u0002s in a related field or equivalent, 7+ years cybersecurity experience with 5+ years supporting DoD/Air Force, RMF/eMASS and vulnerability management experience.
eMASS, ACAS, Nessus, Tenable.io, Qualys, Splunk, QRadar, SolarWinds SEM, Trellix/HBSS, CrowdStrike Falcon, Microsoft Defender, McAfee Endpoint Security, Windows Server, Linux, VMware, Citrix, Active Directory, Azure Active Directory, DB2, IBM WebSphere, PowerShell, Python, Bash
Argo Cyber Systems: Service-disabled veteran-owned cybersecurity firm providing monitoring, assessments, consulting, and managed security services to businesses and government entities.
3+ YOEActive Secret clearance, 3+ years RMF/DoD cybersecurity experience, hands-on with eMASS, ACAS, STIGs, vulnerability management, and Microsoft Office; IAM Level I or equivalent certification required.
HBSS/ESS, Ivanti Endpoint Security, ACAS, Netsparker, Checkmarx, Microsoft Server, Microsoft Workstation, Linux, Active Directory, LDAP, DNS, DHCP, IPv4, IPv6, VPN, SSL/TLS, Microsoft Certificate Server, ActivIdentity ActivClient, SolarWinds, System Center Operations Manager (SCOM), System Center Configuration Manager (SCCM), PuTTY, SFTP, FTP, eMASS, eMASSter, SCAP, STIGs, DoDAF, Microsoft Office Suite, Microsoft Visio, Microsoft Project, SharePoint, FlankSpeed Teams, ACAS vulnerability reports, Security Technical Implementation Guides (STIGs)
Sutter Health: Not-for-profit health system serving Northern and Central California.
2+ YOEBachelor's degree or equivalent experience and 2 years of recent relevant experience. Requires incident response, security analysis, vulnerability management, and information security knowledge; certifications are preferred.
Security Orchestration, Automation, and Response (SOAR), Microsoft Windows, Unix/Linux, Windows, Linux, Domain Name System (DNS), Simple Mail Transfer Protocol (SMTP), Hypertext Transfer Protocol (HTTP), Dynamic Host Configuration Protocol (DHCP), File Transfer Protocol (FTP)
Senior Cyber Security Analyst – Cloud, DevSecOps & AI Security
Holyoke, Massachusetts, United States
$127k-$150k/yrHybridFull Time
ISO New England: Independent nonprofit system operator running New England’s power grid, wholesale electricity markets, and regional transmission planning.
Experience in cloud and AI security, DevSecOps, vulnerability management, AWS/Azure, containers, CI/CD, Terraform/OPA, security monitoring and strong communication skills.
Arootah: Alternative-investment recruiting firm placing full-time and fractional professionals for hedge funds, private equity firms, and family offices.
5+ YOEBachelor's in computer science or related field, 5+ years cybersecurity experience at hedge funds or family offices, relevant certifications (CEH,CISSP,etc.), experience with vulnerability management, incident response, and security frameworks.
Splunk Cloud, Rapid7 Nexpose Vulnerability Scanner, Sophos Antivirus, Varonis DatAlert, ForeScout CounterACT, Microsoft Azure, Microsoft Active Directory, SQL, Microsoft Office365, Microsoft Windows Server, Microsoft Windows