ZipRecruiter

Log In

1

Contract Vulnerability Analyst Jobs in Reno, NV (NOW HIRING)

TekSynap

Penetration Tester

Carson City, NV · On-site

Employees are required to comply with any vaccination requirements mandated by contract, applicable ... Perform network vulnerability assessments and exploitation testing across on-premises and enclave ...

Varsity Tutors

Cyber Security Tutor

Reno, NV · Remote

$40/hr

Deep knowledge of network security, cryptography, threat analysis, vulnerability assessment ... Varsity Tutors does not contract in: Alaska, California, Colorado, Delaware, Hawaii, Maine, New ...

People also search for

All JobsContract Vulnerability Analyst JobsContract Vulnerability Analyst Jobs in Reno, NV

Contract Vulnerability Analyst information

See Reno, NV salary details

$30.9K

$73K

$129.6K

How much do contract vulnerability analyst jobs pay per year?

As of May 28, 2026, the average yearly pay for contract vulnerability analyst in Reno, NV is $73,046.00, according to ZipRecruiter salary data. Most workers in this role earn between $52,300.00 and $86,700.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a Contract Vulnerability Analyst, and why are they important?

To thrive as a Contract Vulnerability Analyst, you need a strong background in cybersecurity principles, vulnerability assessment methodologies, and relevant certifications such as CEH or CompTIA Security+. Familiarity with vulnerability scanning tools like Nessus, Qualys, or OpenVAS, as well as experience with common operating systems and network protocols, is typically required. Analytical thinking, attention to detail, and strong communication skills help analysts effectively identify, prioritize, and report vulnerabilities to stakeholders. These skills are crucial for ensuring organizational security and compliance while minimizing risk in dynamic contract-based environments.

What are some common challenges faced by Contract Vulnerability Analysts, and how can they overcome them?

Contract Vulnerability Analysts often face challenges such as rapidly changing threat landscapes and the need to quickly adapt to new security vulnerabilities in client environments. They must balance multiple client projects and prioritize tasks based on risk and impact. Success in this role requires strong communication skills to clearly explain technical findings to non-technical stakeholders and collaborate with both internal security teams and client IT departments. Building efficient workflows, staying updated with the latest security tools, and participating in regular training can help analysts stay ahead of threats and deliver impactful results.

What is a Contract Vulnerability Analyst?

A Contract Vulnerability Analyst is a cybersecurity professional who is hired on a contractual basis to identify, assess, and report security vulnerabilities within an organization's systems, networks, or applications. Their main role is to help companies find and address security weaknesses before attackers can exploit them. They often use various tools and methodologies to conduct vulnerability assessments, penetration testing, and security audits. Contract Vulnerability Analysts typically work for a set period or on a specific project, providing expert guidance to enhance the organization's security posture.

What is the difference between Contract Vulnerability Analyst vs Security Analyst?

AspectContract Vulnerability AnalystSecurity Analyst
CertificationsCompTIA Security+, CEH, CISSP (preferred)CompTIA Security+, CISSP, CISA
Work EnvironmentContract-based, project-specific roles, often remote or on-siteFull-time, in-house or remote security teams within organizations
Industry UsageIT security firms, consulting companies, tech organizationsCorporate, government, financial institutions
Search & Comparison IntentFocus on vulnerability assessment, penetration testing, security gapsBroader security management, incident response, policy enforcement

The Contract Vulnerability Analyst primarily focuses on identifying and mitigating security vulnerabilities through assessments and testing, often working on a contractual basis. In contrast, a Security Analyst typically handles ongoing security monitoring, incident response, and policy implementation within an organization. While both roles require similar certifications and work in the cybersecurity field, their scope and employment structure differ significantly.

What are the most commonly searched types of Vulnerability Analyst jobs in Reno, NV? The most popular types of Vulnerability Analyst jobs in Reno, NV are:
What are popular job titles related to Contract Vulnerability Analyst jobs in Reno, NV? For Contract Vulnerability Analyst jobs in Reno, NV, the most frequently searched job titles are:
What job categories do people searching Contract Vulnerability Analyst jobs in Reno, NV look for? The top searched job categories for Contract Vulnerability Analyst jobs in Reno, NV are:
What cities near Reno, NV are hiring for Contract Vulnerability Analyst jobs? Cities near Reno, NV with the most Contract Vulnerability Analyst job openings:
Contract Vulnerability Analyst jobs near you
Penetration Tester

Penetration Tester

TekSynap

Carson City, NV • On-site

Other

Medical, Dental, Vision, Life, Retirement, PTO

This job post has expired today. Applications are no longer accepted.

TekSynap rating

8.1

Company rating: 8.1 out of 10

Based on 5 frontline employees who took The Breakroom Quiz

55th of 204 rated it services

Job description

Penetration Tester - Intermediate

We are seeking a Penetration Tester - Intermediate to join our Defense Logistics Agency (DLA) Team.

TekSynap is a fast-growing high-tech company that understands both the pace of technology today and the need to have a comprehensive well planned information management environment. "Technology moving at the speed of thought" embodies these principles – the need to nimbly utilize the best that information technology offers to meet the business needs of our Federal Government customers.

We offer our full-time employees a competitive benefits package to include health, dental, vision, 401K, life insurance, short-term and long-term disability plans, vacation time and holidays.

The safety and health of our employees is of the utmost importance. Employees are required to comply with any vaccination requirements mandated by contract, applicable law or regulation.

By applying to a role at TekSynap you are providing consent to receive text messages regarding your interview and employment status. If at any time you would like to opt out of text messaging, respond "STOP".

As part of the application process, you agree that TekSynap Corporation may retain and use your name, e-mail, and contact information for purposes related to employment consideration.

Responsibilities

Under general supervision, perform penetration testing of applications, systems, and network enclaves to identify security weaknesses and vulnerabilities. Assess enterprise systems using offensive cybersecurity techniques and provide actionable recommendations to reduce risk and improve the organization's overall cybersecurity posture.

Conduct application, network, and wireless penetration testing in accordance with approved methodologies and rules of engagement.

Identify security flaws in computing platforms, applications, and network architectures and develop mitigation strategies to address identified risks.

Apply offensive cybersecurity testing techniques, including manual and automated testing methods.

Coordinate penetration testing activities and schedules with internal stakeholders, system owners, and external partners as required.

Perform network vulnerability assessments and exploitation testing across on-premises and enclave-based environments.

Execute wireless security assessments, including identification of rogue access points and insecure configurations.

Analyze test results and document findings, including severity, impact, and recommended remediation actions.

Prepare and deliver technical assessment reports and briefings to leadership and technical teams.

Support compliance-driven testing efforts, including PCI DSS and other applicable security standards.

Contribute to continuous improvement of enterprise cybersecurity posture through lessons learned and testing feedback.

Required Qualifications

Secret – IT-II (Tier 3) Non-Critical Sensitive Clearance

Possess a certification in penetration testing, such as:

  • Licensed Penetration Tester (LPT)
  • Certified Expert Penetration Tester (CEPT)
  • Certified Ethical Hacker (CEH)
  • Global Information Assurance Certification Penetration Tester (GPEN)

Minimum of 3 years of demonstrated experience performing vulnerability assessments and penetration testing.

Minimum of 2 years of experience conducting network vulnerability assessments and penetration testing methodologies.

Two Years experience with testing tools including NESSUS, METASPLOIT, CANVAS, NMAP, Burp Suite and Kismet.

Minimum of 1 year of experience authoring formal penetration testing or security assessment reports.

Minimum of 2 years of experience using, administering, and troubleshooting Linux operating systems.

Minimum of 2 years of experience using, administering, and troubleshooting Windows Server or Linux servers, including IIS or Apache.

Technical Skills & Knowledge

Proficiency with penetration testing and assessment tools, including Nessus, Metasploit, CANVAS, Nmap, Burp Suite, and Kismet.

Strong understanding of TCP/IP protocols, networking concepts, and network architectures.

Knowledge of open security testing standards and projects, including OWASP.

Understanding of PCI DSS testing requirements.

Knowledge of database, application, and web server design and implementation.

Experience with wireless LAN security testing methodologies and tools.

Experience scripting in one or more of the following languages: Perl, Python, Ruby, Bash, or Java.

Communication Skills

Demonstrated written documentation and oral presentation skills.

Ability to clearly communicate technical findings to both technical and non-technical audiences.

Apply