1

Volunteer Vulnerability Scanning Jobs (NOW HIRING)

Senior Vulnerability Management Engineer

Raleigh, NC · On-site

$101K - $139K/yr

Execute comprehensive vulnerability scans across various technological domains including network ... Participate in annual Impact Days, where you receive paid time off to volunteer for community and ...

Security Engineer

Washington, DC · On-site

$40 - $48/hr

Troubleshoot issues associated with endpoint vulnerability scanning with administrators and federal ... voluntary benefits including life and disability insurance, 401(k) with match, and sick time if ...

Security Engineer III, Product AppSec

$60.25 - $80.25/hr

SCA and vulnerability scanning platforms: Snyk, Mend, Dependabot, GitHub Advanced Security ... Fertility, adoption, and surrogacy support through Maven, plus paid volunteer time * AirVet: 24/7 ...

Cybersecurity Support Analyst

Keyport, WA · On-site

$120K - $135K/yr

... STIGs), vulnerability scanning (ACAS), and creating RMF packages (SSP, SAR, POA&M) for ... Life Insurance (Basic, Voluntary & AD&D) * Paid Time Off (Vacation, Sick & Public Holidays) * Short ...

next page

Showing results 1-20

Volunteer Vulnerability Scanning information

See salary details

$8

$19

$33

How much do volunteer vulnerability scanning jobs pay per hour?

As of Jul 7, 2026, the average hourly pay for volunteer vulnerability scanning in the United States is $19.14, according to ZipRecruiter salary data. Most workers in this role earn between $14.42 and $20.19 per hour, depending on experience, location, and employer.

What is the difference between Volunteer Vulnerability Scanning vs Vulnerability Assessment Specialist?

AspectVolunteer Vulnerability ScanningVulnerability Assessment Specialist
CredentialsBasic cybersecurity certifications, security awareness trainingAdvanced certifications like CISSP, CEH, or OSCP
Work EnvironmentNon-profit, volunteer-based, often remote or on-siteCorporate, government, or consulting firms, often on-site or remote
Industry UsageUsed by organizations seeking free or low-cost security testingUsed by organizations for comprehensive security evaluations

Volunteer Vulnerability Scanning involves using automated tools to identify security weaknesses, often performed by volunteers or non-profit organizations. Vulnerability Assessment Specialists conduct detailed evaluations, including manual testing and analysis, requiring advanced skills and certifications. While both roles focus on identifying security issues, Volunteer Vulnerability Scanning is more accessible and less technical, whereas Vulnerability Assessment Specialists provide in-depth security assessments for organizations.

What are the key skills and qualifications needed to thrive as a Volunteer Vulnerability Scanner, and why are they important?

To thrive as a Volunteer Vulnerability Scanner, you need a solid understanding of cybersecurity fundamentals, network protocols, and common vulnerabilities, often supported by coursework or self-study in information security. Familiarity with tools such as Nessus, OpenVAS, or Nmap, and knowledge of basic reporting systems is typically required. Attention to detail, problem-solving abilities, and strong ethical standards are essential soft skills for this role. These skills ensure accurate identification and responsible reporting of security weaknesses, which are critical for improving organizational cyber defense.

What are the typical responsibilities and challenges faced by someone in a Volunteer Vulnerability Scanning role?

As a Volunteer Vulnerability Scanner, you’ll typically be responsible for running security scans on networks or systems, identifying vulnerabilities, and documenting findings for review by the security team. Common challenges include staying up-to-date with rapidly evolving threats, ensuring scans do not disrupt normal operations, and communicating technical findings to non-technical stakeholders. Volunteers often work alongside experienced cybersecurity professionals, gaining hands-on experience and exposure to industry-standard tools. This role is a great entry point for building practical cybersecurity skills and can lead to more advanced opportunities in the field.

What are Volunteer Vulnerability Scanners?

Volunteer Vulnerability Scanners are individuals who offer their time and expertise to help organizations identify and address security weaknesses in their computer systems or networks. They use specialized tools to scan for vulnerabilities, such as outdated software or misconfigured servers, and report their findings to help improve cybersecurity. These volunteers often work with nonprofits, community groups, or open-source projects that may not have dedicated security staff. Their work helps protect sensitive data and prevent cyberattacks. Organizations benefit from these services by gaining insights into potential risks without the high costs of commercial security audits.
More about Volunteer Vulnerability Scanning jobs
What cities are hiring for Volunteer Vulnerability Scanning jobs? Cities with the most Volunteer Vulnerability Scanning job openings:
What are the most commonly searched types of Vulnerability Scanning jobs? The most popular types of Vulnerability Scanning jobs are:
What states have the most Volunteer Vulnerability Scanning jobs? States with the most job openings for Volunteer Vulnerability Scanning jobs include:
What job categories do people searching Volunteer Vulnerability Scanning jobs look for? The top searched job categories for Volunteer Vulnerability Scanning jobs are:
Infographic showing various Volunteer Vulnerability Scanning job openings in the United States as of July 2026, with employment types broken down into 1% As Needed, 77% Full Time, 14% Part Time, 1% Temporary, and 7% Contract. Highlights an 96% Physical, 1% Hybrid, and 3% Remote job distribution, with an average salary of $39,804 per year, or $19.1 per hour.

Vulnerability Management Program Engineer

SEC.gov | Pathways: Internship Program

Washington, DC

$153K/yr

Other

Posted 5 days ago


Job description

The Office of Information Technology (OIT) is seeking an IT Specialist (INFOSEC) (Vulnerability Management Program Engineer). As a Vulnerability Management Program Engineer, you will lead enterprise vulnerability lifecycle operations across hybrid, cloud, and modern DevSecOps environments. You will architect, optimize, and operate vulnerability scanning platforms; integrate security tooling into CI/CD pipelines; and drive measurable risk reduction across the enterprise.Qualifications:Applicants are responsible for confirming all required materials are submitted by the closing date of the announcement. Please check the How You Will Be Evaluated and Required Documents sections carefully, as missing documents will render the application incomplete and ineligible for review.
Qualifying experience may be obtained in the private or public sector. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. All qualification requirements must be met by the closing date of this announcement.
BASIC REQUIREMENT: For all positions individuals must have IT-related experience demonstrating each of the four competencies listed below:
  1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
  2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
  3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
  4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

MINIMUM QUALIFICATION REQUIREMENT: In addition to meeting the basic requirement, applicants must also meet the minimum qualification requirement below.
SK-14: Applicant must have at least one year of specialized experience equivalent to the GS/SK-13 level:
  1. Executing and managing enterprise vulnerability scanning across on-prem, cloud, and hybrid environments;
  2. Engineering, configuring, or optimizing vulnerability management platforms (Qualys, Tenable, Nessus, or equivalent);
  3. Performing vulnerability triage and risk scoring to develop remediation recommendations for system owners; and
  4. Applying NIST, CIS Benchmarks, DISA STIG, or FedRAMP standards in vulnerability management or compliance operations.

ACCOMPLISHMENT RECORD COMPETENCIES: Your Accomplishment Record narratives should address the following competencies. See the How You Will Be Evaluated section below for more information:
  • Information Systems/Network Security - Implements and uses methods, tools, and procedures, including the development of information security plans and standards, to prevent information systems vulnerabilities and provide or restore privacy and security of applications, information systems, and/or network services.
  • Technology Expertise - Knowledge of the principles and methods of specialized technologies, tools, and delivery systems, including security, risk management, governance, functionality, and user interface in area of expertise (e.g., programming languages, server, web, applications, network).
  • Risk Management and Disaster Recovery - Uses methods and tools for risk assessment and mitigation of risk, including the identification, assessment, and prioritization of risks to minimize, monitor, and control the probability and/or impact of events.
  • Problem Solving and Decision Making - Ability to identify and solve important problems relevant to program areas through sound and timely decision making, even in less than ideal situations, with little or no guidance.
Education:Employment Type: OTHER