ZipRecruiter

Log In

2

Part Time Vulnerability Management Jobs in Washington, DC

Booz Allen Hamilton, Inc.

Wiz Security Process Lead

Ashburn, VA · On-site +1

$86K - $198K/yr

  • Medical

  • Life

  • Retirement

  • PTO

Knowledge of cloud security posture, vulnerability management, identity risk, and DevSecOps ... Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible ...

Booz Allen Hamilton, Inc.

Cyber Triage Analyst

Linthicum, MD · On-site +1

  • Medical

  • Life

  • Retirement

  • PTO

Valid reports will be written in a DoD approved format and sent to the Vulnerability Management ... Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible ...

next page

Showing results 1-20

All JobsVulnerability Management JobsPart Time Vulnerability Management JobsPart Time Vulnerability Management Jobs in Washington, DC

Part Time Vulnerability Management information

See Washington, DC salary details

$42.5K

$122.2K

$162K

How much do part time vulnerability management jobs pay per year?

As of Aug 15, 2026, the average yearly pay for part time vulnerability management in Washington, DC is $122,210.00, according to ZipRecruiter salary data. Most workers in this role earn between $106,500.00 and $133,100.00 per year, depending on experience, location, and employer.

What are the main challenges someone might face working part time in vulnerability management, and how can they overcome them?

Part-time professionals in Vulnerability Management often encounter challenges related to time constraints, such as staying up-to-date with rapidly evolving security threats and coordinating with full-time team members. Balancing workload and ensuring effective communication are key, as vulnerability remediation can require quick action and collaboration across departments. Overcoming these challenges involves strong organizational skills, setting clear priorities, and leveraging automated tools to streamline routine tasks. Maintaining open channels with the security team and regularly reviewing incident reports help ensure part-time staff remain informed and effective.

What is the difference between Part Time Vulnerability Management vs Part Time Security Analyst?

AspectPart Time Vulnerability ManagementPart Time Security Analyst
CertificationsCompTIA Security+, CEH, CISSP (preferred)CompTIA Security+, CISSP, GIAC certifications
Work EnvironmentPrimarily technical, focused on vulnerability scans and assessmentsBroader security monitoring, incident response, and analysis
Employer & Industry UsageIT security teams in various industries, focusing on vulnerability mitigationSecurity teams across industries, handling security events and analysis

Part Time Vulnerability Management roles focus on identifying and mitigating security vulnerabilities through scans and assessments, while Part Time Security Analysts handle broader security monitoring, incident response, and analysis. Both roles require similar certifications and work in IT security environments, but their daily tasks and focus areas differ.

What are the key skills and qualifications needed to thrive as a part time vulnerability management professional?

To thrive as a Part Time Vulnerability Management professional, you need a solid understanding of information security principles, vulnerability assessment, and risk analysis, often supported by a degree in IT or cybersecurity and relevant experience. Familiarity with vulnerability scanning tools (such as Nessus, Qualys, or Rapid7), security frameworks, and possibly certifications like CompTIA Security+ or CEH is typical. Analytical thinking, attention to detail, and effective communication are crucial soft skills for identifying and reporting security risks. These competencies enable professionals to proactively protect organizational assets and ensure robust cybersecurity in a dynamic threat landscape.

What is a part time vulnerability management role?

A Part Time Vulnerability Management role involves identifying, assessing, and mitigating security vulnerabilities in an organization's IT systems on a part-time basis. Professionals in this role use specialized tools to scan networks and applications for weaknesses, prioritize risks, and coordinate with IT teams to address or remediate found vulnerabilities. While working fewer hours than full-time staff, part-time vulnerability managers still play a critical role in maintaining the security and compliance of an organization’s digital environment.

What are the most commonly searched types of Vulnerability Management jobs in Washington, DC?

The most popular types of Vulnerability Management jobs in Washington, DC are:

What are popular job titles related to Part Time Vulnerability Management jobs in Washington, DC?

For Part Time Vulnerability Management jobs in Washington, DC, the most frequently searched job titles are:

What job categories do people searching Part Time Vulnerability Management jobs in Washington, DC look for?

The top searched job categories for Part Time Vulnerability Management jobs in Washington, DC are:

Part Time Vulnerability Management jobs near you
Infographic showing various Part Time Vulnerability Management job openings in Washington, DC as of August 2026, with employment types broken down into 100% Part Time. Highlights an 80% In-person, and 20% Remote job distribution, with an average salary of $122,210 per year, or $58.8 per hour.

(715) Cybersecurity Analyst (Part-Time)

Arlo Solutions LLC

Arlington, VA • On-site, Remote

Part-time

Posted 2 days ago

New

Job description

Position Description:

Arlo Solutions is seeking an experienced Part-time Cybersecurity Analyst to support the Defense Support of Civil Authorities (DSCA) cybersecurity mission. The Cybersecurity Analyst serves as a trusted cybersecurity advisor responsible for supporting Risk Management Framework (RMF) activities, cybersecurity engineering, security assessments, continuous monitoring, vulnerability management, compliance validation, and enterprise cyber risk management across multiple Department of Defense information systems. The successful candidate will work closely with Government Authorizing Officials (AOs), Security Control Assessors (SCAs), Information System Security Managers (ISSMs), Information System Security Officers (ISSOs), Program Managers, engineers, and mission owners to ensure systems remain compliant with DoD cybersecurity policies while enabling mission execution. This position requires strong analytical skills, technical cybersecurity knowledge, excellent communication abilities, and experience supporting DoD Assessment & Authorization (A&A) activities.


Location:  Remote or (Hybrid - Arlington, VA)


Clearance:  Active Secret Clearance
Responsibilities and/or Success Factors:

Cybersecurity Governance Support implementation of the DoD Risk Management Framework (RMF) lifecycle:

  • Assist Government ISSMs with maintaining cybersecurity authorization packages.
  • Review and analyze cybersecurity documentation for completeness and compliance.
  • Perform cybersecurity policy research and interpretation.
  • Develop recommendations to reduce organizational cyber risk. 
  • Assist with cybersecurity governance boards and risk review meetings.
  • Support cybersecurity strategy development.
  • Assist leadership with enterprise cybersecurity initiatives.

Risk Management Framework (RMF) Support all six RMF Steps:

  • Prepare Categorize Select Implement Assess Authorize Monitor Responsibilities include:
  • Security Plans (SSPs)
  • Security Assessment Plans (SAPs)
  • Security Assessment Reports (SARs)
  • Risk Assessment Reports (RARs)
  • POA&M development Security Categorization Control inheritance analysis Reciprocity reviews
  • Continuous Authorization activities Authorization package quality reviews

Cybersecurity Assessments Conduct or support:

  • Security Control Assessments (SCA)
  • Cybersecurity Readiness Assessments
  • Gap Assessments Compliance
  • Reviews Risk Assessments
  • Technical Control Validation
  • Architecture Reviews
  • Cloud Security Reviews
  • Zero Trust Assessments
  • Assist in validating implementation of NIST SP 800-53 Rev. 5 security controls.

Continuous Monitoring Support Enterprise Continuous Monitoring (ConMon) activities including:

  • POA&M tracking
  • Vulnerability trend analysis
  • Configuration management reviews
  • Security control effectiveness reviews
  • Monthly cybersecurity status reporting
  • Audit log reviews
  • Incident trend analysis
  • Compliance metrics
  • Risk dashboards
  • Vulnerability Management Review
  • ACAS/Nessus scan results.
  • Analyze STIG compliance.
  • Validate vulnerability remediation.
  • Track critical findings.
  • Perform risk prioritization.
  • Coordinate remediation activities.
  • Develop mitigation recommendations.
  • Support cybersecurity inspections.

Documentation Develop and maintain:

  • SSPs SAPs SARs RARs POA&Ms
  • Configuration Management Plans
  • Continuous Monitoring Strategies
  • Security Engineering documentation
  • Architecture Diagrams
  • Data Flow Diagrams
  • Standard Operating Procedures
  • Cybersecurity Briefings Executive Reports


Minimum Qualifications Including Certificates:

  • Active DoD Secret Clearance.
  • Bachelor's degree in Cybersecurity, Computer Science, Information Assurance, Information Systems, Engineering, or related discipline. 
  • (5) Five or more years supporting DoD cybersecurity programs.
  • Experience implementing DoD RMF.
  • Experience with NIST SP 800-53 Rev. 5.
  • Experience supporting ATO/IATT/ATO-C activities.
  • Experience writing RMF artifacts.
  • Experience conducting security control validation.
  • Experience supporting vulnerability management.
  • Experience with STIG implementation.
  • Experience with ACAS/Nessus.
  • Strong written and verbal communication skills.
  • Ability to brief senior Government leadership. 


Desired Qualifications:

  • CISSP
  • CASP+
  • Security+
  • CISM
  • CCSP
  • CGRC (formerly CAP)
  • CEH
  • GIAC certifications
  • Cloud security certifications (AWS, Azure, Google Cloud)
  • Experience with Xacta, eMASS, or other Governance,
  • Risk, and Compliance (GRC) platforms.
  • Experience with Agile Authorization and Continuous Authorization.
  • Experience supporting Cloud Service Providers (CSPs).
  • Knowledge of Zero Trust Architecture.
  • Experience supporting DevSecOps pipelines.
  • Experience with AI-enabled systems and emerging technologies.

Apply