ZipRecruiter

Log In

1

Contract Vulnerability Analyst Jobs in Raleigh, NC

Procom Consultants Group

Security Engineer

Durham, NC · On-site

... Contract Staffing (Staff Augmentation) Permanent Placement (Staff Augmentation) ICAP (Contractor ... Experience in information security threat and vulnerability analysis Understanding of networking ...

Infojini Inc

Technical Analyst

Raleigh, NC · On-site

... contract position Job details mentioned below- Title: Technical Analyst Location: Raleigh, NC ... vulnerability assessments Manage remediation of issues identified by penetration tests Maintain ...

Procom Consultants Group

Wintel Admin

Durham, NC · On-site

Application Development Project Management Quality Assurance Business/Systems Analysis ... Contract Staffing (Staff Augmentation) Permanent Placement (Staff Augmentation) ICAP (Contractor ...

Procom Consultants Group

Wintel Engineer

Durham, NC · On-site

Application Development Project Management Quality Assurance Business/Systems Analysis ... Contract Staffing (Staff Augmentation) Permanent Placement (Staff Augmentation) ICAP (Contractor ...

Varsity Tutors

Cyber Security Tutor

Chapel Hill, NC · Remote

$18 - $40/hr

Deep knowledge of network security, cryptography, threat analysis, vulnerability assessment ... Varsity Tutors does not contract in: Alaska, California, Colorado, Delaware, Hawaii, Maine, New ...

Varsity Tutors

Cyber Security Tutor

Durham, NC · Remote

$18 - $40/hr

Deep knowledge of network security, cryptography, threat analysis, vulnerability assessment ... Varsity Tutors does not contract in: Alaska, California, Colorado, Delaware, Hawaii, Maine, New ...

Varsity Tutors

Cyber Security Tutor

Raleigh, NC · Remote

$18 - $40/hr

Deep knowledge of network security, cryptography, threat analysis, vulnerability assessment ... Varsity Tutors does not contract in: Alaska, California, Colorado, Delaware, Hawaii, Maine, New ...

next page

Showing results 1-20

All JobsContract Vulnerability Analyst JobsContract Vulnerability Analyst Jobs in Raleigh, NC

Contract Vulnerability Analyst information

See Raleigh, NC salary details

$30.1K

$71.2K

$126.4K

How much do contract vulnerability analyst jobs pay per year?

As of Aug 10, 2026, the average yearly pay for contract vulnerability analyst in Raleigh, NC is $71,216.00, according to ZipRecruiter salary data. Most workers in this role earn between $51,000.00 and $84,600.00 per year, depending on experience, location, and employer.

What are some common challenges faced by contract vulnerability analysts, and how can they overcome them?

Contract Vulnerability Analysts often face challenges such as rapidly changing threat landscapes and the need to quickly adapt to new security vulnerabilities in client environments. They must balance multiple client projects and prioritize tasks based on risk and impact. Success in this role requires strong communication skills to clearly explain technical findings to non-technical stakeholders and collaborate with both internal security teams and client IT departments. Building efficient workflows, staying updated with the latest security tools, and participating in regular training can help analysts stay ahead of threats and deliver impactful results.

What is a contract vulnerability analyst?

A Contract Vulnerability Analyst is a cybersecurity professional who is hired on a contractual basis to identify, assess, and report security vulnerabilities within an organization's systems, networks, or applications. Their main role is to help companies find and address security weaknesses before attackers can exploit them. They often use various tools and methodologies to conduct vulnerability assessments, penetration testing, and security audits. Contract Vulnerability Analysts typically work for a set period or on a specific project, providing expert guidance to enhance the organization's security posture.

What is the difference between Contract Vulnerability Analyst vs Security Analyst?

AspectContract Vulnerability AnalystSecurity Analyst
CertificationsCompTIA Security+, CEH, CISSP (preferred)CompTIA Security+, CISSP, CISA
Work EnvironmentContract-based, project-specific roles, often remote or on-siteFull-time, in-house or remote security teams within organizations
Industry UsageIT security firms, consulting companies, tech organizationsCorporate, government, financial institutions
Search & Comparison IntentFocus on vulnerability assessment, penetration testing, security gapsBroader security management, incident response, policy enforcement

The Contract Vulnerability Analyst primarily focuses on identifying and mitigating security vulnerabilities through assessments and testing, often working on a contractual basis. In contrast, a Security Analyst typically handles ongoing security monitoring, incident response, and policy implementation within an organization. While both roles require similar certifications and work in the cybersecurity field, their scope and employment structure differ significantly.

What are the key skills and qualifications needed to thrive as a contract vulnerability analyst, and why are they important?

To thrive as a Contract Vulnerability Analyst, you need a strong background in cybersecurity principles, vulnerability assessment methodologies, and relevant certifications such as CEH or CompTIA Security+. Familiarity with vulnerability scanning tools like Nessus, Qualys, or OpenVAS, as well as experience with common operating systems and network protocols, is typically required. Analytical thinking, attention to detail, and strong communication skills help analysts effectively identify, prioritize, and report vulnerabilities to stakeholders. These skills are crucial for ensuring organizational security and compliance while minimizing risk in dynamic contract-based environments.
What are the most commonly searched types of Vulnerability Analyst jobs in Raleigh, NC? The most popular types of Vulnerability Analyst jobs in Raleigh, NC are:
What are popular job titles related to Contract Vulnerability Analyst jobs in Raleigh, NC? For Contract Vulnerability Analyst jobs in Raleigh, NC, the most frequently searched job titles are:
What job categories do people searching Contract Vulnerability Analyst jobs in Raleigh, NC look for? The top searched job categories for Contract Vulnerability Analyst jobs in Raleigh, NC are:
What cities near Raleigh, NC are hiring for Contract Vulnerability Analyst jobs? Cities near Raleigh, NC with the most Contract Vulnerability Analyst job openings:
Contract Vulnerability Analyst jobs near you

DevSecOps Analyst

Computer World Services

Morrisville, NC • On-site

Full-time

Posted 11 days ago

Job description

Computer World Services (CWS) is seeking a highly motivated and technically skilled DevSecOps Analyst to support the National Institute of Environmental Health Sciences (NIEHS) under the NSITES III contract. The DevSecOps Analyst provides technical expertise in secure software delivery, infrastructure automation, cybersecurity operations, vulnerability management, and enterprise application security. This position combines traditional information security responsibilities with modern DevSecOps practices to ensure security is integrated throughout the Software Development Lifecycle (SDLC), Infrastructure as Code (IaC), Continuous Integration/Continuous Deployment (CI/CD), and enterprise platform operations.

The successful candidate will possess hands-on experience with vulnerability management platforms, Infrastructure as Code, CI/CD technologies, container platforms, and application security tools while supporting compliance with Federal cybersecurity standards and guidance, including FISMA, NIST Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIH and HHS security policies, and Cybersecurity and Infrastructure Security Agency (CISA) Binding Operational Directives (BODs).
Key Tasks & Responsibilities

Enterprise Security Operations

  • Support planning, coordination, implementation, and maintenance of enterprise information security capabilities.
  • Administer enterprise security infrastructure supporting LAN, WAN, cloud, and hybrid environments.
  • Design, implement, and maintain network security controls.
  • Develop, review, and maintain firewall policies, NAT rules, VPN configurations, security zones, and access control lists.
  • Perform firewall software upgrades, patch management, and configuration maintenance.
  • Administer Intrusion Detection and Prevention Systems (IDS/IPS).
  • Administer centralized log aggregation and Security Information and Event Management (SIEM) platforms.
  • Support web filtering and secure web gateway technologies.
  • Maintain file integrity monitoring solutions.
  • Investigate Data Loss Prevention (DLP) alerts and resolve DLP policy issues.
  • Assist in incident response activities involving network, endpoint, and application security.

CI/CD Pipeline Engineering

  • Design, develop, maintain, and improve enterprise CI/CD pipelines.
  • Implement automated build, test, security validation, packaging, and deployment workflows.
  • Support enterprise CI/CD platforms including:
    • Jenkins
    • GitLab CI/CD
    • GitHub Actions
  • Automate application deployment across development, testing, staging, and production environments.
  • Support Git-based source control management, branching strategies, and release management.
  • Troubleshoot pipeline failures and deployment issues.
  • Optimize pipeline performance and automation efficiency.

Infrastructure Automation

  • Develop Infrastructure as Code (IaC) using Terraform.
  • Develop system automation using Ansible.
  • Automate infrastructure provisioning and configuration management.
  • Build reusable infrastructure modules and deployment templates.
  • Support enterprise platform modernization initiatives.
  • Automate routine administrative and operational activities.
  • Standardize infrastructure deployments across multiple environments.

Container Platform Administration

  • Support Docker-based application deployments.
  • Administer Kubernetes clusters.
  • Support Rancher-managed Kubernetes environments.
  • Manage enterprise container registries.
  • Implement container security best practices.
  • Perform image vulnerability scanning and remediation.
  • Support runtime container security initiatives.
  • Assist application teams with container migration and deployment.
  • Troubleshoot containerized applications and orchestration environments.

Application Security

  • Integrate security testing throughout the SDLC.
  • Configure and maintain:
    • OpenText Fortify (SAST)
    • Dynamic Application Security Testing (DAST)
    • Software Composition Analysis (SCA)
    • Secrets Scanning
  • Review vulnerability scan findings.
  • Collaborate with developers to remediate security findings.
  • Implement automated security gates within CI/CD pipelines.
  • Promote secure coding practices.
  • Support software assurance initiatives.
  • Assist with threat modeling and application risk assessments.

Vulnerability Management

  • Administer Tenable Security Center (SC).
  • Administer Nessus vulnerability scanners.
  • Perform authenticated and unauthenticated vulnerability assessments.
  • Analyze vulnerability results.
  • Track remediation activities.
  • Conduct risk assessments.
  • Coordinate vulnerability remediation with infrastructure and application teams.
  • Support compliance reporting and continuous monitoring.
  • Support CISA Binding Operational Directives (BODs), CVEs, and vulnerability remediation efforts.
  • Assist with penetration testing remediation activities.

Software Lifecycle Management Support

Support software lifecycle management activities for:

  • NSITES III operational tools
  • Standard enterprise software deployments
  • Optional licensed software
  • Customer-requested software
  • Enterprise software platforms

Responsibilities include:

  • Software packaging
  • Software testing
  • Version control
  • Patch validation
  • Vulnerability remediation
  • Change management
  • Continuous Integration
  • Software maintenance
  • Software deployment
  • Lifecycle documentation

Support software enhancements, maintenance, and security updates for:

  • Java Runtime Environment
  • Enterprise software platforms
  • Hardware drivers
  • Custom applications
  • Commercial Off-The-Shelf (COTS) software

Support remediation of software vulnerabilities with:

  • CVSS v4 scores of 7.0 or higher
  • CISA Binding Operational Directives (BODs)
  • Audit findings
  • Penetration testing findings

Compliance and Governance

Support compliance with:

  • FISMA
  • NIST Cybersecurity Framework (CSF)
  • NIST Risk Management Framework (RMF)
  • NIST SP 800-53
  • NIH Information Security Policies
  • HHS Information Security Requirements
  • CISA Binding Operational Directives (BODs)
  • Secure Software Development Framework (SSDF)
  • Federal Secure Software Supply Chain requirements

Assist with:

  • Security documentation
  • Audit preparation
  • Risk assessments
  • Security control implementation
  • Continuous monitoring
  • Authority to Operate (ATO) activities
Education & Experience

Education

  • Bachelor's degree in Computer Science, Information Technology Management, or Engineering. Alternatively, four years of related experience may substitute for the educational requirement.

Experience

  • 3-7 years of experience in Windows system administration in enterprise environments
  • Experience supporting large-scale Data Center operations
  • Experience supporting multi-platform environments (Windows, Linux, virtualization, storage, and database systems)  
Certifications
  • AWS Certified DevOps Engineer
  • Microsoft Azure DevOps Engineer Expert
  • Certifications such as CompTIA A+, Security+, Network+, or Microsoft certifications
  • ITIL certification preferred.
Security Clearance
  • Applicants must be able to obtain a Public Trust clearance

Computer World Services is an affirmative action and equal employment opportunity employer. Current employees and/or qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, disability, protected veteran status, genetic information or any other characteristic protected by local, state, or federal laws, rules, or regulations.

Computer World Services is committed to the full inclusion of all qualified individuals. As part of this commitment, Computer World Services will ensure that individuals with disabilities (IWD) are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact Human Resources at [email protected].

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
apply for this job

Apply