ZipRecruiter

Log In

1

Vulnerability Analyst Jobs in Virginia (NOW HIRING)

KBR

RF Analyst - Senior

Springfield, VA

$183K - $224K/yr

Develop and refine RF threat models and vulnerability analysis methodologies (e.g., coupling pathways, susceptibility thresholds, system-level impacts). * Provide expert guidance on protective ...

KBR, Inc.

RF Analyst - Senior

Springfield, VA · On-site

$183K - $224K/yr

Develop and refine RF threat models and vulnerability analysis methodologies (e.g., coupling pathways, susceptibility thresholds, system-level impacts). * Provide expert guidance on protective ...

Cymertek

Information Assurance Analyst

Reston, VA · On-site

Conduct system vulnerability assessments * Monitor compliance with security policies * Implement ... Risk assessment and analysis * Incident response techniques * Proficiency in security tools

Cymertek

Information Assurance Analyst

Tysons, VA · On-site

Conduct system vulnerability assessments * Monitor compliance with security policies * Implement ... Risk assessment and analysis * Incident response techniques * Proficiency in security tools

Cymertek

Information Assurance Analyst

Chantilly, VA · On-site

Conduct system vulnerability assessments * Monitor compliance with security policies * Implement ... Risk assessment and analysis * Incident response techniques * Proficiency in security tools

Cymertek

Network Security Analyst

Reston, VA · On-site

Familiarity with vulnerability scanning tools DESIRED SKILLS * Experience with advanced threat ... analyst workforce development. At our company, you come first. We're committed to creating an ...

Cymertek

Network Security Analyst

Tysons, VA · On-site

Familiarity with vulnerability scanning tools DESIRED SKILLS * Experience with advanced threat ... analyst workforce development. At our company, you come first. We're committed to creating an ...

Cymertek

Network Security Analyst

Chantilly, VA · On-site

Familiarity with vulnerability scanning tools DESIRED SKILLS * Experience with advanced threat ... analyst workforce development. At our company, you come first. We're committed to creating an ...

previous page

Showing results 41-60

All JobsVulnerability Analyst JobsVulnerability Analyst Jobs in Virginia

Vulnerability Analyst information

See Virginia salary details

$30.7K

$72.6K

$128.9K

How much do vulnerability analyst jobs pay per year?

As of Aug 8, 2026, the average yearly pay for vulnerability analyst in Virginia is $72,633.00, according to ZipRecruiter salary data. Most workers in this role earn between $52,000.00 and $86,300.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a vulnerability analyst, and why are they important?

To thrive as a Vulnerability Analyst, you need expertise in cybersecurity principles, risk assessment, and vulnerability management, often supported by a degree in information security or a related field. Familiarity with vulnerability scanning tools (such as Nessus, Qualys, or Rapid7), knowledge of operating systems, and certifications like CompTIA Security+ or CEH are commonly required. Strong analytical thinking, attention to detail, and effective communication skills set top candidates apart. These abilities are crucial for accurately identifying system weaknesses and effectively advising teams on how to remediate security threats.

What are the typical day-to-day responsibilities of a vulnerability analyst?

As a Vulnerability Analyst, your daily tasks often include running vulnerability scans, analyzing findings, prioritizing risks based on severity, and working with IT or development teams to coordinate remediation efforts. You will also document your findings, prepare reports for stakeholders, and stay informed about the latest security threats and exploits. Collaboration with other security professionals and IT staff is common, as resolving vulnerabilities often requires cross-functional teamwork. This role requires a balance of technical analysis and effective communication to ensure organizational security posture is continuously improved.

What is a vulnerability analyst?

A Vulnerability Analyst is a cybersecurity professional responsible for identifying, assessing, and mitigating security weaknesses in an organization's systems, networks, and applications. They use tools like vulnerability scanners, penetration testing frameworks, and security assessments to identify potential threats. Their role includes analyzing vulnerabilities, prioritizing risks, and working with IT and security teams to implement necessary patches or fixes. They also stay up to date with emerging threats and ensure compliance with security policies and regulations.

What are the most commonly searched types of Vulnerability Analyst jobs in Virginia? The most popular types of Vulnerability Analyst jobs in Virginia are:
What are popular job titles related to Vulnerability Analyst jobs in Virginia? For Vulnerability Analyst jobs in Virginia, the most frequently searched job titles are:
What job categories do people searching Vulnerability Analyst jobs in Virginia look for? The top searched job categories for Vulnerability Analyst jobs in Virginia are:
What cities in Virginia are hiring for Vulnerability Analyst jobs? Cities in Virginia with the most Vulnerability Analyst job openings:
Vulnerability Analyst jobs near you
Infographic showing various Vulnerability Analyst job openings in Virginia as of August 2026, with employment types broken down into 75% Full Time, and 25% Temporary. Highlights an 100% In-person job distribution, with an average salary of $72,633 per year, or $34.9 per hour.

Cybersecurity Analyst (Vulnerability Management & Continuous Monitoring)

Chenega Corporation

Oakton, VA

Full-time

Re-posted 2 days ago

Job description

Summary

Cybersecurity Analyst (Vulnerability Management & Continuous Monitoring)

Oakton, VA

Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where professional development is embedded in your employer’s core culture? If so, Chenega Military, Intelligence & Operations Support (MIOS) could be the place for you! Join our team of professionals who support large-scale government operations by leveraging cutting-edge technology and take your career to the next level! 

SecuriGence delivers essential technology services supporting critical national security missions. We are seeking a Cybersecurity Analyst (Vulnerability Management & Continuous Monitoring) to support Department of Defense (DoD) cybersecurity operations by executing vulnerability management, security compliance, and Continuous Monitoring (ConMon) activities in accordance with the Risk Management Framework (RMF). This role is responsible for identifying, assessing, prioritizing, and tracking vulnerabilities using enterprise tools, ensuring compliance with Security Technical Implementation Guides (STIGs), and responding to Information Assurance Vulnerability Alerts (IAVAs).


Responsibilities
  • Vulnerability Management
    • Perform vulnerability scanning using Assured Compliance Assessment Solution (ACAS) (e.g., Tenable.sc / Nessus).
    • Enforcing the ACAS best practice guide requirements when performing vulnerability scans in ACAS
    • Analyze scan results to identify vulnerabilities, misconfigurations, and compliance gaps.
    • Validate findings against the latest released DISA STIGs and applicable security baselines.
    • Review of provided checklists and working with system admins in identifying gaps for POA&M creation.
    • Assess and track vulnerabilities in accordance with DoD timelines and risk severity.
    • Correlate vulnerabilities with IAVA/IAVM notices and ensure timely remediation or mitigation.
    • Develop and maintain Plan of Action and Milestones (POA&M) documentation.
    • Maintenance of Risk Acceptance (RA) POA&M items within SOR (System of Record) and coordinating with System administrators to validate that RA is required instead of a POA&M.
  • STIG Compliance & Hardening
    • Apply and validate Security Technical Implementation Guides (STIGs) across operating systems, applications, and network devices.
    • Conduct manual and automated STIG compliance checks using tools such as ACAS Audit checks, STIG Viewer, SCAP Compliance Checker (SCC), and Evaluate-STIG.
    • Document compliance status and provide remediation guidance to system administrators.
    • Support system hardening efforts aligned with DoD baseline configurations.
    • Ensure that golden images are maintained for Servers (RHEL and Windows) and Workstations following STIG guidance.
  • IAVA/IAVM Management
    • Monitor and assess Information Assurance Vulnerability Alerts (IAVAs) and Bulletins (IAVBs).
    • Determine system applicability and operational impact.
    • Coordinate remediation actions and track compliance deadlines.
    • Maintain IAVA compliance reporting and documentation for audits.
  • Continuous Monitoring (ConMon)
    • Execute Continuous Monitoring activities in accordance with RMF Step 6.
    • Monitor security controls for effectiveness and ongoing compliance.
    • Conduct control assessments and assist with periodic security reviews.
    • Support automated and manual data collection for ConMon dashboards and reporting.
    • Identify trends, recurring issues, and systemic risks across systems.
  • RMF & Compliance Support
  • Support RMF activities across all six steps, with emphasis on:
    • Control implementation validation
    • Security control assessment support
    • Ongoing authorization (ATO sustainment)
  • Update and maintain RMF artifacts, including:
    • System Security Plan (SSP)
    • Security Assessment Report (SAR)
    • Plan of Action and Milestones (POA&M)
    • Security Assessment Plan (SAP)
  • Map vulnerabilities and findings to NIST SP 800-53 controls.
  • Reporting & Documentation
    • Generate vulnerability and compliance reports for leadership and Authorizing Officials (AOs).
    • Provide risk-based recommendations and remediation strategies.
    • Maintain audit-ready documentation in accordance with DoD and agency requirements
  • Other duties as assigned

Qualifications
  • High school diploma or GED equivalent
  • 5+ years of experience in DoD cybersecurity or RMF-based environments
  • Hands-on experience with:
    • ACAS (Nessus / Tenable.sc)
    • STIG implementation and validation
    • IAVA/IAVM processes
    • Experience with vulnerability assessment, risk analysis, and remediation tracking.
  • DoD 8570/8140 Compliance: Must meet IAT Level II requirements (e.g., Security+)
  • Active DoD Top Secret clearance with SCI eligibility.

Knowledge, Skills, and Abilities:

  • Strong understanding of:
    • DoD RMF (DoDI 8510.01)
    • NIST SP 800-53 security controls
  • Ability to manage multiple systems and priorities in a regulated environment
  • Strong analytical and problem-solving skills
  • Attention to detail and compliance rigor
  • Ability to translate technical risk into mission impact
  • Effective communication with technical and non-technical stakeholders
  • Relevant certifications:
    • Certified Information Systems Security Professional (CISSP)
    • Certified Ethical Hacker (CEH) or equivalent
    • DISA ACAS Training Certificate
  • Experience with:
    • ACAS
    • SCAP Compliance Checker (SCC) / Evaluate-STIG
    • STIG Viewer
    • eMASS, Xacta
    • Trellix, MDE
    • Splunk, Elastic
  • Familiarity with scripting (e.g., PowerShell, Python) for automation.
  • Experience in enterprise-level ConMon programs or NOSC/SOC environments.

How you’ll grow 

At Chenega MIOS, our professional development plan focuses on helping our team members at every level of their careers to identify and use their strengths to do their best work every day. From entry-level employees to senior leaders, we believe there’s always room to learn. 

We offer opportunities to help sharpen skills in addition to hands-on experience in the global, fast-changing business world. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their careers. 

Benefits 

At Chenega MIOS, we know that great people make a great organization. We value our team members and offer them a broad range of benefits. 

Learn more about what working at Chenega MIOS can mean for you. 

Chenega MIOS’s culture 

Our positive and supportive culture encourages our team members to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them be healthy, centered, confident, and aware. We offer well-being programs and continuously look for new ways to maintain a culture where we excel and lead healthy, happy lives. 

Corporate citizenship 

Chenega MIOS is led by a purpose to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our team members, and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities. 

Learn more about Chenega’s impact on the world. 

Chenega MIOS News- https://chenegamios.com/news/ 

Tips from your Talent Acquisition Team 

We want job seekers exploring opportunities at Chenega MIOS to feel prepared and confident. To help you with your research, we suggest you review the following links: 

Chenega MIOS web site - www.chenegamios.com 

Glassdoor - https://www.glassdoor.com/Overview/Working-at-Chenega-MIOS-EI_IE369514.11,23.htm 

LinkedIn - https://www.linkedin.com/company/1472684/ 

Facebook - https://www.facebook.com/chenegamios/ 


Estimated Salary/Wage
USD $120,000.00/Yr. Up to USD $184,000.00/Yr.Qualifications:
  • High school diploma or GED equivalent
  • 5+ years of experience in DoD cybersecurity or RMF-based environments
  • Hands-on experience with:
    • ACAS (Nessus / Tenable.sc)
    • STIG implementation and validation
    • IAVA/IAVM processes
    • Experience with vulnerability assessment, risk analysis, and remediation tracking.
  • DoD 8570/8140 Compliance: Must meet IAT Level II requirements (e.g., Security+)
  • Active DoD Top Secret clearance with SCI eligibility.

Knowledge, Skills, and Abilities:

  • Strong understanding of:
    • DoD RMF (DoDI 8510.01)
    • NIST SP 800-53 security controls
  • Ability to manage multiple systems and priorities in a regulated environment
  • Strong analytical and problem-solving skills
  • Attention to detail and compliance rigor
  • Ability to translate technical risk into mission impact
  • Effective communication with technical and non-technical stakeholders
  • Relevant certifications:
    • Certified Information Systems Security Professional (CISSP)
    • Certified Ethical Hacker (CEH) or equivalent
    • DISA ACAS Training Certificate
  • Experience with:
    • ACAS
    • SCAP Compliance Checker (SCC) / Evaluate-STIG
    • STIG Viewer
    • eMASS, Xacta
    • Trellix, MDE
    • Splunk, Elastic
  • Familiarity with scripting (e.g., PowerShell, Python) for automation.
  • Experience in enterprise-level ConMon programs or NOSC/SOC environments.

How you’ll grow 

At Chenega MIOS, our professional development plan focuses on helping our team members at every level of their careers to identify and use their strengths to do their best work every day. From entry-level employees to senior leaders, we believe there’s always room to learn. 

We offer opportunities to help sharpen skills in addition to hands-on experience in the global, fast-changing business world. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their careers. 

Benefits 

At Chenega MIOS, we know that great people make a great organization. We value our team members and offer them a broad range of benefits. 

Learn more about what working at Chenega MIOS can mean for you. 

Chenega MIOS’s culture 

Our positive and supportive culture encourages our team members to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them be healthy, centered, confident, and aware. We offer well-being programs and continuously look for new ways to maintain a culture where we excel and lead healthy, happy lives. 

Corporate citizenship 

Chenega MIOS is led by a purpose to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our team members, and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities. 

Learn more about Chenega’s impact on the world. 

Chenega MIOS News- https://chenegamios.com/news/ 

Tips from your Talent Acquisition Team 

We want job seekers exploring opportunities at Chenega MIOS to feel prepared and confident. To help you with your research, we suggest you review the following links: 

Chenega MIOS web site - www.chenegamios.com 

Glassdoor - https://www.glassdoor.com/Overview/Working-at-Chenega-MIOS-EI_IE369514.11,23.htm 

LinkedIn - https://www.linkedin.com/company/1472684/ 

Facebook - https://www.facebook.com/chenegamios/ 

Education:UNAVAILABLEEmployment Type: FULL_TIME

Apply