ZipRecruiter

Log In

1

Contract Vulnerability Scanning Jobs in Virginia

CACI

Mid Security Specialist

Springfield, VA

$63K - $129K/yr

... contract award Responsibilities: Support Risk Management Framework (RMF) activities including security control implementation, assessment, and continuous monitoring. Conduct vulnerability scanning ...

CACI

Mid Security Specialist

Sterling, VA

$63K - $129K/yr

... contract award Responsibilities: Support Risk Management Framework (RMF) activities including security control implementation, assessment, and continuous monitoring. Conduct vulnerability scanning ...

SAIC

Cloud Engineer

Chantilly, VA · Hybrid

$120K - $160K/yr

The CMCC System Facilitator contract positions SAIC to accelerate how new capabilities are ... Awareness of security practices such as STIG hardening, vulnerability scanning, Zero Trust, or MLS ...

Imagineeer, LLC

DevOps Engineer

Arlington, VA · On-site

$100 - $130/hr

Prior experience supporting federal government contracts * Familiarity with vulnerability scanning tools (Tenable, Nessus, or similar) * Experience with container security best practices Additional ...

previous pagenext page

Showing results 21-40

All JobsContract Vulnerability Scanning JobsContract Vulnerability Scanning Jobs in Virginia

Contract Vulnerability Scanning information

What is contract vulnerability scanning?

Contract vulnerability scanning refers to the process of hiring third-party professionals or firms to assess and identify security weaknesses in an organization's systems, networks, or applications. The scanning is typically performed on a contractual basis, often as part of compliance requirements or routine security practices. These experts use automated tools and manual techniques to detect vulnerabilities that could be exploited by attackers, providing detailed reports and recommendations for remediation. This approach allows organizations to benefit from specialized expertise without maintaining a full-time, in-house vulnerability scanning team.

What are some common challenges faced by professionals in contract vulnerability scanning roles?

Professionals in Contract Vulnerability Scanning often encounter challenges such as managing tight deadlines, adapting to varied client environments, and ensuring clear communication of technical findings to non-technical stakeholders. They must stay updated with the latest vulnerabilities and scanning tools, as threats and technologies evolve rapidly. Additionally, balancing thoroughness with efficiency is crucial, as clients expect comprehensive reports without significant delays. Collaboration with IT, security, and management teams is also key to ensure that identified vulnerabilities are properly addressed.

What are the key skills and qualifications needed to thrive as a contract vulnerability scanning specialist, and why are they important?

To thrive as a Contract Vulnerability Scanning Specialist, you need expertise in network security, vulnerability assessment methodologies, and a solid understanding of operating systems and protocols, often supported by certifications like CompTIA Security+ or CEH. Proficiency with vulnerability scanning tools such as Nessus, OpenVAS, or Qualys, and familiarity with ticketing and reporting systems are typically required. Attention to detail, analytical thinking, and clear communication are essential soft skills for identifying risks and conveying findings to non-technical stakeholders. These capabilities ensure the accurate detection of security weaknesses and effective risk mitigation for clients or organizations.

What is the difference between Contract Vulnerability Scanning vs Penetration Tester?

AspectContract Vulnerability ScanningPenetration Tester
Primary FocusAutomated identification of security vulnerabilities in systemsManual and automated testing to exploit vulnerabilities and assess security
Tools & TechniquesVulnerability scanners, automated toolsCustom scripts, penetration tools, manual testing
Work EnvironmentTypically performed remotely or on client sites, within security teamsOften on-site, conducting simulated attacks
CertificationsCompTIA Security+, CISSP, CEHOSCP, CEH, GPEN

Contract Vulnerability Scanning involves automated tools to identify security weaknesses, while Penetration Testers perform manual and automated testing to exploit vulnerabilities. Both roles require security certifications but differ in approach and scope, with vulnerability scanning being more automated and penetration testing more hands-on.

What are the most commonly searched types of Vulnerability Scanning jobs in Virginia?

The most popular types of Vulnerability Scanning jobs in Virginia are:

What are popular job titles related to Contract Vulnerability Scanning jobs in Virginia?

For Contract Vulnerability Scanning jobs in Virginia, the most frequently searched job titles are:

What job categories do people searching Contract Vulnerability Scanning jobs in Virginia look for?

The top searched job categories for Contract Vulnerability Scanning jobs in Virginia are:

What cities in Virginia are hiring for Contract Vulnerability Scanning jobs?

Cities in Virginia with the most Contract Vulnerability Scanning job openings:

Contract Vulnerability Scanning jobs near you

Cybersecurity Engineer

Modern Technology Solutions, Inc.

Springfield, VA • On-site

$100K - $150K/yr

Full-time

Re-posted 14 days ago

Job description

Modern Technology Solutions, Inc. (MTSI) is seeking a Cybersecurity Engineer to join our team in Springfield, VA. Qualified candidates must be U.S

citizens with an active TS/SCI clearance and be eligible to obtain a CI Poly. Responsibilities: Support daily cybersecurity operations for AI/ML T&E environments, tools, applications, and operational evaluation platforms. Maintain compliance with RMF and ATO requirements through management of security documentation, control tracking, and operational security processes.

Support development, maintenance, and update of ATO packages, RMF artifacts, SSPs, and security compliance documentation. Track and manage POA&Ms, vulnerability findings, remediation activities, and security action items. Execute or coordinate required vulnerability scanning and security assessment activities across operational environments.

Facilitate secure deployment and integration of AI/ML tools, models, datasets, and evaluation pipelines across NGA operational domains including COE, SECNET, and SBU. Support secure operations across multiple classification levels including UNCLASSIFIED, SECRET, and TS/SCI environments. Identify, assess, escalate, and support remediation of cybersecurity risks impacting operational T&E activities.

Support implementation of security practices within DevSecOps workflows, operational pipelines, and AI/ML evaluation environments. Collaborate with ISSMs, engineers, developers, and mission stakeholders to support secure and compliant operational execution. Maintain audit-ready cybersecurity documentation and support operational readiness activities.

Required Qualifications: Experience supporting cybersecurity operations, RMF compliance, vulnerability management, or security documentation activities. Familiarity with RMF, ATO processes, POA&M tracking, and operational cybersecurity practices. Understanding of cybersecurity concepts related to operational systems, cloud environments, or enterprise infrastructure.

Ability to support secure operational environments and work collaboratively within multidisciplinary technical teams. Strong analytical, organizational, and communication skills. Desired Experience: Experience supporting DoD or Intelligence Community programs.

Familiarity with DevSecOps workflows, cloud security, and operational AI/ML environments. Experience supporting vulnerability scanning, compliance assessments, or operational security monitoring activities. Familiarity with NGA operational domains, classified environments, and secure system integration processes.

Security certifications such as Security+, CySA+, SSCP, or equivalent Education Requirements: Bachelor's Degree in IT or STEM related field, or additional relevant experience in lieu of a degree. Security certifications such as CISSP, CASP+, Security+, CySA+, SSCP, CCSP, or equivalent. Clearance Requirements: Active TS/SCI clearance and the ability to pass a CI polygraph within 30 days.

The pay range for this position is $100,000 to $150,000/year; however, base pay offered may vary depending on established government contract ranges, job-related knowledge, skills, and experience, and other factors. MTSI also offers a full range of medical, financial, and other benefits, dependent on the position offered. Base pay information is based on market location.

Applications will be accepted on an ongoing basis. This posting will be renewed periodically until the position is filled. #LI-RC2.

Apply