Overnight Bods Developer Jobs (NOW HIRING)

Boston Government Services, LLC. (BGS) has created this Evergreen Talent Pool post for gathering qualified candidates for a position relating to Vulnerability Management Analyst to support our clients in various locations across the US. 

BGS is an engineering, technology, and security firm helping to advance missions of national importance for government programs, national laboratories, national security facilities, nuclear operations, and complex projects. We support clients at every stage, from strategic planning and program management to the execution of engineering and technical activities. We work to attract and retain the best talent because the best talent delivers the best results for our clients. Our capabilities are based on our experience in complex, secure, and highly regulated environments. We leverage our experience and capabilities to provide mission-driven solutions tuned to our client's mission needs and strategic direction.

Work that Matters. People that Matter More. At BGS, we believe meaningful work starts with great people. We foster a culture built on respect, collaboration, and accountability—where employees are empowered to contribute ideas, grow professionally, and make an impact. We care about our employees’ well-being through competitive benefits, clear expectations, and an environment that values both excellence and connection.

If you align with BGS’ company values and culture, we would love for you to explore opportunities to join our growing team by checking out the job description below!

Responsibilities: 

The Vulnerability Management Analyst supports vulnerability scanning, analysis, prioritization, remediation coordination, reporting, KEV tracking, and risk-based mitigation across the NIH/OD-OIT managed environment.

• Operate or support host-based, network-based, application, and database vulnerability scanning activities.
• Analyze scan results, identify high-risk vulnerabilities, and develop mitigation guidance.
• Coordinate remediation tracking with system owners, technical POCs, program areas, and security stakeholders.
• Support vulnerability management reporting, ad hoc reports, remediation activity summaries, and risk-based prioritization.
• Track critical vulnerabilities, KEVs, configuration errors, missing assets, unauthorized software/hardware, and remediation timelines.
• Monitor authoritative government and private-sector vulnerability intelligence sources.
• Support integration of vulnerability management with CDM, RMF, risk registers, POA&Ms, and compliance reporting.

Requirements: 

• Bachelor’s Degree or equivalent.
• Experience performing vulnerability analysis, scan review, remediation tracking, technical risk assessment, or security assessments.
• Familiarity with vulnerability scanners, CDM concepts, KEV catalog tracking, CISA BODs, CVSS, configuration findings, and remediation workflows.
• Ability to translate technical findings into clear risk statements and practical mitigation recommendations.
• Strong coordination and reporting skills.

Preferred Qualifications: 

• Security+, CySA+, Tenable/Qualys/Rapid7 certification, CISSP, CISA, or equivalent.