ZipRecruiter

Log In

1

Assistant Vulnerability Management Jobs in Springfield, VA

Time Systems LLC

Vulnerability Management Analyst

MD · On-site

Vulnerability Management Analyst Location- Joint Base Andrews, MD Clearance- Secret Certifications ... accuracy. * Assist with vulnerability trend analysis, risk scoring, and continuous monitoring ...

JCS Solutions LLC

ISSO - Vulnerability Management

MD · On-site

$100K - $114K/yr

The ISSO - Vulnerability Management will play a critical role in maintaining the cybersecurity ... * Assist with cybersecurity audits, inspections, accreditation activities, and security control ...

kgs

Vulnerability Analyst II

Washington, DC · On-site

... * Assist in the integration of vulnerability management activities with SBA's POA&M program, ensuring identified vulnerabilities are accurately documented, tracked, and reported within the POA&M ...

Koniag, Inc.

Vulnerability Analyst II

Washington, DC · On-site

$110K - $136K/yr

... * Assist in the integration of vulnerability management activities with SBA's POA&M program, ensuring identified vulnerabilities are accurately documented, tracked, and reported within the POA&M ...

kgs

Vulnerability Analyst II

Washington, DC · On-site

... * Assist in the integration of vulnerability management activities with SBA's POA&M program, ensuring identified vulnerabilities are accurately documented, tracked, and reported within the POA&M ...

next page

Showing results 1-20

All JobsVulnerability Management JobsAssistant Vulnerability Management JobsAssistant Vulnerability Management Jobs in Springfield, VA

Assistant Vulnerability Management information

See Springfield, VA salary details

$30.3K

$50.6K

$72.6K

How much do assistant vulnerability management jobs pay per year?

As of Aug 6, 2026, the average yearly pay for assistant vulnerability management in Springfield, VA is $50,551.00, according to ZipRecruiter salary data. Most workers in this role earn between $43,900.00 and $50,700.00 per year, depending on experience, location, and employer.

What is the difference between Assistant Vulnerability Management vs Security Analyst?

AspectAssistant Vulnerability ManagementSecurity Analyst
CertificationsCompTIA Security+, Certified Ethical Hacker (CEH) (preferred)CompTIA Security+, CISSP, CEH
Work EnvironmentSupport team, IT security departmentSecurity operations center, IT security team
ResponsibilitiesAssist in vulnerability scans, document findings, support remediationAnalyze security threats, investigate incidents, implement security measures

Assistant Vulnerability Management roles focus on supporting vulnerability assessments and remediation efforts, often working under supervision. Security Analysts have a broader scope, analyzing threats, investigating security incidents, and implementing security strategies. Both roles require similar certifications and work within IT security teams, but Security Analysts typically have more advanced responsibilities and decision-making authority.

What are the most commonly searched types of Vulnerability Management jobs in Springfield, VA? The most popular types of Vulnerability Management jobs in Springfield, VA are:
What are popular job titles related to Assistant Vulnerability Management jobs in Springfield, VA? For Assistant Vulnerability Management jobs in Springfield, VA, the most frequently searched job titles are:
What job categories do people searching Assistant Vulnerability Management jobs in Springfield, VA look for? The top searched job categories for Assistant Vulnerability Management jobs in Springfield, VA are:
What cities near Springfield, VA are hiring for Assistant Vulnerability Management jobs? Cities near Springfield, VA with the most Assistant Vulnerability Management job openings:
Assistant Vulnerability Management jobs near you
Infographic showing various Assistant Vulnerability Management job openings in Springfield, VA as of August 2026, with employment types broken down into 1% As Needed, 83% Full Time, 13% Part Time, and 3% Contract. Highlights an 87% Physical, 3% Hybrid, and 10% Remote job distribution, with an average salary of $50,551 per year, or $24.3 per hour.

ISSO - Vulnerability Management

JCS Solutions LLC

Andrews, MD • On-site

$100K - $114K/yr

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

This job post has expired today. Applications are no longer accepted.

Job description

Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success!
Job Summary
JCS Solutions is seeking an Information System Security Officer (ISSO) - Vulnerability Management to support the Air Force National Capital Region (AFNCR) IT Services Program. This program provides mission-critical IT support for Headquarters Air Force (HAF), Air Force District of Washington (AFDW), the Office of the Secretary of Defense (OSD), the Joint Chiefs of Staff, and other Air Force organizations throughout the National Capital Region.
The ISSO - Vulnerability Management will play a critical role in maintaining the cybersecurity posture of enterprise systems supporting national defense missions. This position is responsible for managing vulnerability assessment and remediation efforts, supporting Risk Management Framework (RMF) compliance activities, and ensuring adherence to Department of Defense (DoD), Air Force, and cybersecurity regulatory requirements. The successful candidate will thrive in a fast-paced, mission-focused environment where secure, reliable, and compliant IT operations are essential to mission success.
What's in it for you:
  • Join a premier technology firm specializing in innovative solutions.
  • Be part of a collaborative, inclusive, and innovative work culture.
  • Enjoy tremendous growth potential in a high-performing team environment.
  • A robust benefits package:
    • Health, dental, and vision insurance
    • Life insurance
    • Short-and-long term disability
    • Paid time off (PTO)
    • 401k retirement plan with employer match
    • Annual Professional Development Reimbursement Program
    • And more!

What you will do:
  • Manage the Plan of Action and Milestones (POA&M) process for cybersecurity vulnerabilities and DISA STIG findings.
  • Analyze vulnerability scan results to identify CAT I, CAT II, and CAT III findings, false positives, and system configuration issues.
  • Track, document, and validate remediation activities, POA&Ms, risk acceptances, and exceptions in alignment with RMF requirements.
  • Review and interpret DISA STIG checklists and work closely with system administrators and engineers to implement and maintain secure configurations.
  • Prepare and deliver vulnerability reports, compliance dashboards, and cybersecurity metrics for leadership, inspection readiness, and compliance reviews, including CCRI and CORA activities.
  • Support the development and maintenance of ACAS asset groupings, scan zones, credentialed scanning configurations, and scan tuning strategies.
  • Maintain data hygiene within ACAS, ensuring consistent tagging, grouping, and reporting structures.
  • Collaborate with Queue Managers, ISSOs, system administrators, and engineering teams to prioritize, track, and remediate critical vulnerabilities.
  • Support continuous monitoring initiatives and maintain compliance with RMF, NIST, DoD, and Air Force cybersecurity requirements.
  • Assist with cybersecurity audits, inspections, accreditation activities, and security control assessments.
  • Develop and maintain documentation supporting vulnerability management, compliance efforts, and system security posture.
What you will bring:
  • Active DoD Secret Security Clearance.
  • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field. Additional years of relevant experience and certifications may be considered in lieu of a degree.
  • 3+ years of cybersecurity, information assurance, vulnerability management, or system administration experience.
  • At least 1 year of hands-on experience with ACAS, Tenable, or related vulnerability management platforms.
  • CompTIA Security+ CE or higher DoD 8570/8140-compliant certification meeting current ISSO qualification requirements.
  • Experience managing POA&Ms, vulnerability remediation efforts, and cybersecurity compliance documentation.
  • Working knowledge of DISA STIGs, vulnerability severity classifications, risk assessment methodologies, and remediation strategies.
  • Familiarity with NIST SP 800-53, the Risk Management Framework (RMF), and Air Force cybersecurity policies, including AFMAN 17-130.
  • Experience analyzing vulnerability scan results and identifying CAT I, II, and III findings, false positives, and configuration issues.
  • Strong understanding of cybersecurity principles, enterprise systems, networks, and secure configuration management.
  • Exceptional attention to detail, documentation skills, and the ability to interpret technical vulnerability data and communicate recommendations effectively.
  • Strong interpersonal and collaboration skills with the ability to work across technical and non-technical teams.
How you will wow us:
  • Experience supporting U.S. Air Force, DISA, AFNCR, or other Department of Defense mission environments.
  • Familiarity with ACAS, DISPATCH, EvaluateSTIG, STIG Manager, and related vulnerability management and compliance tools.
  • Experience supporting CCRI, CORA, Command Cyber Readiness Inspections, or similar cybersecurity assessment and inspection activities.
  • Proven success coordinating enterprise vulnerability remediation campaigns and driving closure of high-priority findings.
  • Ability to communicate risk-based recommendations to technical teams, leadership, and non-technical stakeholders.
  • Experience developing executive-level dashboards, cybersecurity metrics, and compliance reporting.
  • Knowledge of automation and scripting technologies such as PowerShell, Python, or Nessus APIs to improve operational efficiency and reporting capabilities.
  • Advanced cybersecurity certifications such as CISSP, CASP+, CISM, or equivalent credentials.
  • A proactive, solutions-oriented mindset with a passion for strengthening cybersecurity posture and supporting mission-critical operations.
  • Experience working in fast-paced environments supporting high-visibility customers where operational readiness and security are paramount.
JCS Solutions (JCS) is a premier technology firm providing innovative solutions and high-quality services in defense, national security, and civilian sectors. JCS offers enterprise-wide solutions including cloud computing, software development, cybersecurity, digital modernization, and management consulting for the federal government. At JCS, we elevate our customers' mission through the application of technology and professional services. Our commitment to investing in our workforce drives innovation and progress for our clients, employees, and communities.
JCS is both a Great Place to Work and a Top Places to Work certified company.
Our employees embody our core values, and we are looking for others who do too!
  • Customer Experience: Strive for excellence and delight our clients
  • Innovation: Embrace creative thinking to enable continual growth and powerful solutions
  • Accountability: Take ownership of and pride in our actions and service delivery
  • Inspire: Be inspired to be your best self and have fun in the process
  • Integrity: Do the right thing, the right way, every time!
  • Stewardship: The careful and responsible management of something entrusted to our care.

At JCS Solutions, compensation is based on a number of factors such as location, qualifications, and applicable contract terms. The general salary range for this position is as follows: $100,000.00 - $114,000.00.
Please Note: Employment is contingent upon successfully passing a pre-employment drug screening and any other required background checks, consistent with applicable law.
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to any protected status protected by applicable federal, state, or local laws.
NOTICE: Please be aware that all JCS Solutions communications related to job interviews and offers from our recruiting team willonlycome from @JCSSolutions.com. We want to emphasize thatwe do not conduct any interviews over Discord, Slack, Skype, Zoom, or any chat app.

Apply