Internship Rmf Analyst Jobs in Washington, DC (NOW HIRING)

Job Description Everforth ECS is seeking a Junior Vulnerability Management Analyst to work in the National Capital Region covering the Pentagon, Falls Church, and Fairfax . Please Note: This position is contingent upon contract award. The War Data Platform (WDP) is a key initiative within the U.S. Department of War's (DoW) AI-First strategy introduced in early 2026. The WDP separates business and financial data from operational warfighting data, aiming to accelerate the deployment of artificial intelligence (AI) on the battlefield. The WDP extends to Unclassified, Secret, and Top Secret environments, and supports collaboration between Combatant Commands, Joint Staff directorates, Senior Executive Service leaders, and operational analysts. The Junior Vulnerability Management Analyst supports enterprise vulnerability management operations across WDP's classified and unclassified environments, contributing directly to the continuous monitoring, POA&M tracking, and remediation coordination activities that sustain WDP's authorization posture across NIPRNet, SIPRNet, and JWICS. This is an entry-level role offering structured, hands-on exposure to government vulnerability management operations at scale, where scan validation accuracy, remediation timeliness, and documentation discipline directly impact mission system authorization status and warfighter platform availability. • Supports enterprise vulnerability management operations for Department of War mission systems across unclassified and classified environments.
• Performs day-to-day validation of vulnerability scan results generated by ACAS, endpoint security platforms, and cloud security tools to confirm accuracy, scope, and system relevance.
• Tracks vulnerability findings and remediation actions within POA&M repositories, ServiceNow workflows, and continuous monitoring dashboards to maintain current authorization status.
• Coordinates directly with system owners, administrators, and cybersecurity teams to collect remediation evidence, confirm patch application, and document mitigation actions.
• Assists with identification and documentation of false positives and compensating controls under guidance of senior analysts.
• Maintains detailed records supporting Risk Management Framework activities, including vulnerability aging, remediation progress, and outstanding risk conditions.
• Prepares routine vulnerability status reports, remediation summaries, and data inputs for leadership briefings using SharePoint and reporting tools.
• Supports deviation and risk acceptance requests through evidence gathering and baseline documentation.
• Participates in vulnerability management reviews, remediation planning sessions, and operational coordination meetings with government and contractor stakeholders.
• Contributes to improved cyber hygiene, reduced exposure timelines, and sustained authorization posture while reinforcing program values of accountability, consistency, transparency, and mission-focused risk reduction.
• Performs other duties as assigned. Required Skills • Ability to obtain and maintain a Top Secret (TS) security clearance.
• Experience in vulnerability management, cybersecurity operations, IT security, or a closely related discipline, including relevant academic, internship, or lab-based experience demonstrating foundational familiarity with vulnerability assessment and remediation tracking concepts.
• IAM Level I certification from an approved credential, including CompTIA Security+ CE, ISC² CAP, ISC² SSCP, or GIAC GSLC. Desired Skills • Active Top Secret (TS) security clearance.
• Foundational familiarity with vulnerability scanning tools such as ACAS, Nessus, or Security Content Automation Protocol (SCAP) platforms, including basic awareness of credentialed scanning workflows, scan result interpretation, and risk-based finding classification applicable to government or classified network environments.
• Basic understanding of the DoW Risk Management Framework (RMF) process, including awareness of POA&M structure, NIST 800-53 control families, continuous monitoring obligations, and the role of vulnerability management data in supporting Authority to Operate documentation and Body-of-Evidence packages.
• Exposure to IT service management platforms such as ServiceNow or equivalent ticketing and workflow tools, including basic experience logging, tracking, and documenting remediation actions or security findings within structured program repositories.
• Familiarity with DISA Security Technical Implementation Guide (STIG) compliance concepts and DoW cyber hygiene standards, with a demonstrated interest in developing skills in vulnerability remediation coordination, compensating control documentation, and deviation request support within enterprise cybersecurity operations programs. ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law. is the federal segment of , a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies. Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow. We value: * Attracting and developing top talent and high-performing teams * Fostering a culture that is engaging, accountable, and mission-driven