ZipRecruiter

Log In

1

Sr Risk And Vulnerability Analyst Jobs in Baltimore, MD

Crisis24

Senior Business Risk Analyst

Annapolis, MD · On-site

$125K - $145K/yr

More information is available at Crisis24 AiiA is seeking a Senior Business Risk Analyst with deep expertise in corporate risk and financial analysis to assess complex business and financial risks.

GFT.

Physical Security & Risk Analyst

Owings Mills, MD

$105K - $125K/yr

Conduct physical security assessments, threat and vulnerability analyses, and risk evaluations for facilities, infrastructure, and critical operations. * Support mission assurance initiatives by ...

Aegon

Sr Risk Manager, GRC Systems

Baltimore, MD · On-site

The Senior Risk Manager, GRC Systems, will play a pivotal role in shaping how operational risk ... Support executive-level reporting and insights, including dashboards and analysis of risk trends ...

next page

Showing results 1-20

All JobsSr Risk And Vulnerability Analyst JobsSr Risk And Vulnerability Analyst Jobs in Baltimore, MD

Sr Risk And Vulnerability Analyst information

See Baltimore, MD salary details

$53.2K

$109.1K

$141.6K

How much do sr risk and vulnerability analyst jobs pay per year?

As of Aug 31, 2026, the average yearly pay for sr risk and vulnerability analyst in Baltimore, MD is $109,147.00, according to ZipRecruiter salary data. Most workers in this role earn between $89,900.00 and $136,100.00 per year, depending on experience, location, and employer.

What does a Sr Risk and Vulnerability Analyst do?

A Sr Risk and Vulnerability Analyst is responsible for identifying, assessing, and mitigating risks and vulnerabilities within an organization’s information systems and processes. They conduct security assessments, analyze potential threats, and recommend strategies to protect assets and data. Their role often involves collaborating with IT, compliance, and management teams to develop risk management policies and respond to emerging security issues. Additionally, they may lead vulnerability testing and ensure the organization meets regulatory and industry standards for cybersecurity.

What are the key skills and qualifications needed to thrive as a Sr Risk and Vulnerability Analyst, and why are they important?

To thrive as a Sr Risk and Vulnerability Analyst, you need in-depth knowledge of cybersecurity principles, risk assessment methodologies, and a relevant degree or certifications such as CISSP or CEH. Proficiency with vulnerability scanning tools (e.g., Nessus, Qualys), SIEM systems, and risk management frameworks (like NIST or ISO 27001) is typically required. Strong analytical thinking, attention to detail, and effective communication skills help you interpret complex data and collaborate across teams. These competencies are vital for identifying threats, reducing organizational risk, and ensuring robust security defenses.

What are some common challenges faced by a Sr Risk and Vulnerability Analyst, and how can they be addressed?

Sr Risk and Vulnerability Analysts often encounter challenges such as staying updated with rapidly evolving threats, managing a large volume of vulnerabilities, and effectively communicating risks to non-technical stakeholders. Addressing these challenges involves continuous learning, leveraging automated tools for vulnerability management, and developing strong reporting and presentation skills to translate technical findings into actionable business insights. Collaboration with IT, security teams, and business leaders is essential to prioritize and remediate risks efficiently.

What is the difference between Sr Risk And Vulnerability Analyst vs Risk Analyst?

AspectSr Risk And Vulnerability AnalystRisk Analyst
CertificationsCertifications like CISSP, CISA often preferredSimilar certifications, often entry to mid-level
Work EnvironmentFocus on cybersecurity vulnerabilities and risk management in ITBroader risk assessment across financial, operational, or strategic areas
Employer & Industry UsageCommon in cybersecurity, IT, finance sectorsUsed across various industries including finance, insurance, and consulting

The Sr Risk And Vulnerability Analyst specializes in identifying and mitigating cybersecurity vulnerabilities, often requiring advanced certifications and experience. In contrast, a Risk Analyst has a broader scope, assessing risks across multiple business areas. Both roles require analytical skills but differ in focus and industry application.

What are popular job titles related to Sr Risk And Vulnerability Analyst jobs in Baltimore, MD?

For Sr Risk And Vulnerability Analyst jobs in Baltimore, MD, the most frequently searched job titles are:

What job categories do people searching Sr Risk And Vulnerability Analyst jobs in Baltimore, MD look for?

The top searched job categories for Sr Risk And Vulnerability Analyst jobs in Baltimore, MD are:

What cities near Baltimore, MD are hiring for Sr Risk And Vulnerability Analyst jobs?

Cities near Baltimore, MD with the most Sr Risk And Vulnerability Analyst job openings:

Sr Risk And Vulnerability Analyst jobs near you

2910 Vulnerability Analyst

Fort George G Meade, MD • On-site

InterImage
IT Services • 51 - 200 employees
Learn more about InterImageexternal

Full-time

Re-posted 17 days ago

Job description

Position Overview
We are seeking a Systems Security Engineer with a strong background in vulnerability management to support the design, integration, and security of mission-critical IT systems. This role focuses on assessing, testing, and maintaining system security controls across the full system development life cycle (SDLC), ensuring compliance with DoD security standards and risk management frameworks.
Key Responsibilities
  • Perform vulnerability management activities, including identification, analysis, tracking, and remediation of system and application vulnerabilities.
  • Provide security engineering analysis supporting the design and integration of hardware, software, man-machine interfaces, and system-level requirements.
  • Develop system security test requirements, plans, and strategies.
  • Conduct security control assessments and testing to validate compliance with security requirements.
  • Perform vulnerability and risk analyses of applications throughout all phases of the SDLC.
  • Track, assess, and apply Security Technical Implementation Guides (STIGs) and system patches.
  • Support Risk Management Framework (RMF) processes, including documentation, control implementation, and continuous monitoring.
  • Maintain and update system authorization artifacts using eMASS.

Required Qualifications
  • Minimum of 4 years of experience performing vulnerability management in an enterprise or DoD environment.
  • Hands-on experience conducting vulnerability and risk assessments across the SDLC.
  • Experience with STIG implementation and patch management.
  • Working knowledge of RMF processes and eMASS.
  • CompTIA Security+ certification (required).

Preferred Qualifications
  • Experience supporting DoD or other federal mission environments.
  • Familiarity with system security testing tools and methodologies.
  • Ability to work closely with system engineers, developers, and stakeholders to remediate security risks.

Clearance Level:
Secret
Job Location:
Fort Meade, MD
Salary Range:
124000-14000

Apply