ZipRecruiter

Log In

1

Overnight Vulnerability Management Analyst Jobs in Virginia

Arete Associates

VULNERABILITY MGMT ANALYST

Falls Church, VA · On-site

$66K - $87K/yr

As our Vulnerability Management Analyst in Falls Church, VA, you will own the end-to-end remediation cycle -- scanning, prioritization, patch qualification, deployment, and verification -- across ...

Infosys

Vulnerability Management Analyst

Reston, VA · On-site

... analyses, and document findings with preventive recommendations • Participate in evaluation of ... vulnerability management standard, procedures, and guidelines • Identify vulnerabilities ...

CACI

Vulnerability Management Engineer

Hampton, VA · On-site

Job Title: Vulnerability Management Engineer Job Category: Information Technology Time Type ... Analyze and interpret ACAS scan results to identify, validate, and prioritize vulnerabilities based ...

New

next page

Showing results 1-20

All JobsVulnerability Management Analyst JobsOvernight Vulnerability Management Analyst JobsOvernight Vulnerability Management Analyst Jobs in Virginia

Overnight Vulnerability Management Analyst information

What does an overnight vulnerability management analyst do?

An Overnight Vulnerability Management Analyst is responsible for identifying, assessing, and managing security vulnerabilities within an organization's systems during overnight hours. They monitor security alerts, analyze threats, and ensure that vulnerabilities are documented and communicated to the appropriate teams for remediation. Their work helps to protect the organization from cyber threats by ensuring that vulnerabilities are addressed promptly, even outside of regular business hours.

What skills and qualifications are needed to thrive as an overnight vulnerability management analyst?

To thrive as an Overnight Vulnerability Management Analyst, a solid understanding of cybersecurity principles, knowledge of network and system vulnerabilities, and a relevant degree or certification such as CompTIA Security+ or CISSP are essential. Familiarity with vulnerability scanning tools like Nessus, Qualys, or Rapid7, as well as ticketing and SIEM systems, is typically required. Strong analytical thinking, attention to detail, and effective communication skills help analysts prioritize threats and collaborate across teams, especially during off-hours. These skills are crucial to ensure timely identification and mitigation of security risks, maintaining organizational security around the clock.

What unique challenges do overnight vulnerability management analysts face, and how can they prepare for success?

Overnight Vulnerability Management Analysts often work independently or with a small team during less traditional hours, which means they need to be highly self-motivated and comfortable making decisions with limited immediate supervision. A key challenge is ensuring timely identification and escalation of critical vulnerabilities, even when support resources may be limited overnight. To succeed, analysts should develop strong communication skills for clear hand-offs with daytime teams and stay organized to manage multiple concurrent security alerts. Familiarity with a range of vulnerability assessment tools and the ability to document findings thoroughly are also essential for seamless collaboration and reporting.

What is the difference between Overnight Vulnerability Management Analyst vs Vulnerability Analyst?

AspectOvernight Vulnerability Management AnalystVulnerability Analyst
CertificationsCompTIA Security+, CISSP (preferred)CompTIA Security+, CISSP (preferred)
Work EnvironmentNight shifts, monitoring security tools overnightDay shifts, analyzing vulnerabilities during business hours
Employer & Industry UsageIT security teams in various industries, especially 24/7 operationsCybersecurity teams across multiple sectors, often during standard hours

Both roles focus on identifying and managing security vulnerabilities, with the Overnight Vulnerability Management Analyst working primarily during night shifts to ensure 24/7 security coverage. The main difference lies in work hours and shift timing, while required skills and certifications are largely similar.

What are the most commonly searched types of Vulnerability Management Analyst jobs in Virginia?

The most popular types of Vulnerability Management Analyst jobs in Virginia are:

What cities in Virginia are hiring for Overnight Vulnerability Management Analyst jobs?

Cities in Virginia with the most Overnight Vulnerability Management Analyst job openings:

Overnight Vulnerability Management Analyst jobs near you

Vulnerability Management Analyst

Arlington, VA • Hybrid

Absolute Business Solutions Corp
51 - 200 employees
Learn more about Absolute Business Solutions Corpexternal

Full-time

Retirement, PTO

Posted 16 days ago

Job description

Absolute Business Solutions Corp (ABSC) is not just another tech company. Were a community of innovators, engineers, analysts and business professionals working together with our customers to tackle the most complex national security challenges. For more than 20 years weve supported critical Department of Defense (DoD), Intelligence Community (IC), Federal Civilian missions and global, multi-national corporations. We specialize in supporting our clients in the Intelligence, Technology, Defense, AI/ML, and Data Science fields. As we continue to grow at a rapid pace, we need some amazing new professionals to join our team.

ABSC is seeking a Vulnerability Management Analyst to join our team supporting the Air Force National Capital Region (AFNCR) Information Technology Services (ITS2) program, delivering secure, resilient technology supporting Air Force operations across the National Capital Region, including the Pentagon, Joint Base Andrews, and Joint Base Anacostia-Bolling. Spanning cybersecurity, engineering, enterprise operations, infrastructure modernization, logistics, and 24/7 mission support, AFNCR ITS2 also supports the National Military Command Center (NMCC), Joint Staff, and other mission partnersgiving technical professionals the opportunity to solve complex challenges while helping keep critical national-defense capabilities connected, protected, and operational.

As a Vulnerability Management Analyst, you will help strengthen the cybersecurity posture of the AFDW environment through vulnerability detection, assessment, analysis, remediation, and compliance activities across Air Force networks and systems. You will work closely with ISSOs, ISSMs, cybersecurity teams, engineers, system and network administrators, program offices, and mission owners to identify risk, drive remediation, support compliance, and help keep critical Air Force systems secure, resilient, and mission ready.

The majority of work is conducted on-site at our client location in the National Capital Region primarily Pentagon, Joint Base Andrews and/or Joint Base Anacostia-Bolling (JBAB), based on each assignment. We offer a flexible schedule and, occasionally, some tasks may be performed remotely with prior client approval.

Security clearance required for this role: An Active Secret security clearance is required.

Responsibilities:

The Vulnerability Management Analyst will support activities including:

  • Conduct and support vulnerability detection, assessment, analysis, and remediation using DoD-, Air Force-, and AFDW-approved systems and tools.
  • Maintain and support Assured Compliance Assessment Solution (ACAS) capabilities and ensure vulnerability scans are properly configured and executed.
  • Prepare and provide recurring vulnerability scan results, cybersecurity reports, and vulnerability trend analysis.
  • Analyze scan data and security logs to identify vulnerabilities, anomalies, policy violations, unauthorized activity, and potential cybersecurity incidents.
  • Configure vulnerability assessment tools in accordance with NIST, DoD, Air Force, and DISA cybersecurity guidance.
  • Review and track vulnerability reports, IAVMs, TCNOs, TASKORDs, and other DoD/USAF cybersecurity directives.
  • Support remediation of identified vulnerabilities, including Critical and Zero-Day vulnerabilities, within required compliance timelines.
  • Review and validate Security Technical Implementation Guide (STIG) checklists and recommend appropriate remediation actions.
  • Develop, coordinate, track, and manage Plans of Action and Milestones (POA&Ms) through closure.
  • Review and track Risk Management Framework (RMF)-related POA&Ms and security controls.
  • Support periodic reviews and testing of RMF security controls.
  • Configure, manage, operate, and maintain approved automated vulnerability management and endpoint security capabilities, including Microsoft Endpoint Configuration Manager (MECM) or equivalent tools.
  • Coordinate vulnerability remediation activities with cybersecurity offices, engineering teams, system/network administrators, PMOs, customers, mission owners, and external Air Force/DoD organizations.
  • Provide weekly vulnerability remediation status reporting, including open/closed IAVMs, STIG findings, RMF POA&Ms, and other compliance metrics.
  • Recommend technical and procedural solutions to improve the security posture of network, platform, and system environments.
  • Support the development and maintenance of cybersecurity policies, procedures, and standard operating procedures.

Requirements:

  • Education/Years Experience/Certifications:
    • Option 1 Standard Qualification
      • Bachelors degree in Computer Science, Cybersecurity, Information Technology, Information Systems, Engineering, or a related technical discipline.
      • Current CompTIA Security+ CE or equivalent DoD 8570/8140 IAT Level II certification.
    • Option 2 Master's Degree Substitution
      • Masters degree in a relevant technical discipline.
      • Ability to obtain Security+ CE or equivalent IAT Level II certification within six months of assignment.
    • Option 3 Experience Substitution
      • No degree required with a minimum of 5 years of intensive, progressive relevant experience demonstrating the technical proficiency required for the position.
      • Security+ CE or equivalent DoD 8570/8140 IAT Level II certification in accordance with contract requirements.
  • Skills:
    • Must be able to work effectively in a highly regulated DoD environment.
    • Must possess strong analytical, troubleshooting, documentation, and communication skills.
    • Must be able to coordinate across technical teams, cybersecurity organizations, customers, and mission stakeholders.
    • Must maintain all certifications required for the assigned labor category before performing work.
    • Personnel with elevated privileges on Air Force networks must maintain applicable DoD cybersecurity workforce certifications.
    • Must be able to read, write, speak, and understand English.
    • On-call or after-hours support may be required based on mission

Desired Skills:

Strong candidates will have hands-on experience with one or more of the following:

  • ACAS / Tenable Security Center / Nessus
  • Vulnerability scanning and remediation
  • DISA STIGs and SRGs
  • RMF and cybersecurity control assessment
  • POA&M development and management
  • IAVM / cybersecurity directive compliance
  • Microsoft Endpoint Configuration Manager (MECM/SCCM)
  • Endpoint Security products
  • NIPRNet and/or SIPRNet environments
  • DoD and Air Force cybersecurity policies
  • NIST cybersecurity standards and guidance
  • Security log analysis and incident identification
  • Vulnerability metrics, trend analysis, and compliance reporting

Salary is commensurate with education and years experience. Salary range for this requisition is: $90k-$155k annual.

Who we are:
ABSC is a technology and services company that combines the agility of a small business with proven processes refined over more than two decades in business. We specialize in supporting public sector clients in the Intelligence, Defense, Health, and Safety areas. Our team stands ready to deliver the next generation of programs, personnel, and solutions to help advance our federal government customers driving innovation, agility, and security across all mission areas.

Some of our benefits include:

  • Generous PTO plus 11 Federal Holidays
  • Retirement Planning 401k Fully Vested with Match
  • Annual Health and Wellness Allowance buy an Apple Watch, a treadmill, or hit the gym on us
  • Career Development Annual Funds to spend on Education and Training
  • Volunteer Time Off Annually, all employees can spend 8 hours directly supporting a charity of choice
  • Charitable Match ABSC matches an employees donation to a qualifying charity
  • Referral Program We pay for internal and external referrals!
  • LOV Awards Earn bonus awards throughout the year from our Living Our Values awards program

Apply to join our team today! We are always looking to grow our team - if you know someone who is seeking a new career opportunity, please share this job opening with them. ABSC offers generous external referral bonuses. You dont need to be an employee to benefit from our Referral Program.

*ABSC is a proud V3, Virginia Values Vets, member which recognizes our commitment to hiring Veterans. If you are a veteran, please be sure to include that in your application.*

Equal Opportunity Employer, including veterans and individuals with disabilities.

Apply