1

Vulnerability Scanner Jobs in Maryland (NOW HIRING)

Vulnerability Management Lead

Bethesda, MD ยท On-site

$120 - $180/hr

Oversee vulnerability scanning, prioritization, remediation coordination, reporting, and compliance alignment across a large and diverse asset base. * Work closely with stakeholders to identify ...

Vulnerability Management Lead

Bethesda, MD

$109K - $144K/yr

Oversee vulnerability scanning, prioritization, remediation coordination, reporting, and compliance alignment across a large and diverse asset base. * Work closely with stakeholders to identify ...

Analyze scan results to identify CAT I/II/III findings, false positives, and configuration errors ... Prepare and deliver vulnerability reports, compliance dashboards, and metrics for leadership and ...

Vulnerability Management to support the Air Force National Capital Region IT Services program. The ... Analyze scan results to identify CAT I/II/III findings, false positives, and configuration errors.

Working under the guidance of senior cybersecurity professionals, this entry-level role will assist with vulnerability scanning using DoD-approved tools such as ACAS, application of DISA STIGs and ...

New

Showing results 21-40

Vulnerability Scanner information

See Maryland salary details

$9

$15

$22

How much do vulnerability scanner jobs pay per hour?

As of Aug 21, 2026, the average hourly pay for vulnerability scanner in Maryland is $15.68, according to ZipRecruiter salary data. Most workers in this role earn between $13.75 and $16.78 per hour, depending on experience, location, and employer.

What is a vulnerability scanner?

Vulnerability scanners are specialized software tools designed to automatically identify security weaknesses in computer systems, networks, and applications. They work by scanning for known vulnerabilities, misconfigurations, and outdated software that could be exploited by cyber attackers. These tools help organizations proactively find and fix security issues before they can be compromised. Regular use of vulnerability scanners is a key part of maintaining strong cybersecurity defenses.

What are the key skills and qualifications needed to thrive as a vulnerability scanner?

To thrive as a Vulnerability Scanner, you need a solid understanding of cybersecurity principles, network protocols, and operating systems, often supported by relevant certifications like CompTIA Security+ or CEH. Familiarity with vulnerability scanning tools such as Nessus, OpenVAS, and Qualys, as well as knowledge of ticketing systems and reporting platforms, is typically required. Analytical thinking, attention to detail, and effective communication are vital soft skills for identifying risks and sharing findings with technical and non-technical stakeholders. These skills are crucial to accurately detect vulnerabilities, prioritize threats, and help organizations strengthen their security posture.

How does a vulnerability scanner typically collaborate with IT and security teams during a vulnerability assessment?

Vulnerability Scanners work closely with both IT and security teams to ensure comprehensive assessments of network and application vulnerabilities. They often coordinate with system administrators to schedule scans, minimize disruptions, and gain necessary access. After identifying vulnerabilities, they discuss findings with security analysts to prioritize remediation efforts and provide actionable recommendations. Effective communication and teamwork are essential, as scanners must translate technical results into understandable risks for various stakeholders.

What is the difference between Vulnerability Scanner vs Penetration Tester?

AspectVulnerability ScannerPenetration Tester
CredentialsCertifications like CompTIA Security+, CEH, CISSP often preferredCertifications like OSCP, CEH, GPEN often required
Work EnvironmentPrimarily software-based, automated scanning toolsHands-on testing, manual exploitation, on-site or remote
Industry UsageUsed by security teams for vulnerability assessmentEngaged for in-depth security testing and exploitation

While vulnerability scanners automatically identify security weaknesses, penetration testers perform manual testing to exploit vulnerabilities. Both roles are essential for comprehensive security, but they differ in approach and depth of testing.

Infographic showing various Vulnerability Scanner job openings in Maryland as of August 2026, with employment types broken down into 62% Full Time, 35% Part Time, 2% Contract, and 1% Nights. Highlights an 100% Physical job distribution, with an average salary of $32,618 per year, or $15.7 per hour.

IT Security Vulnerability Specialist (0036)

OCT Consulting, LLC

Suitland, MD โ€ข Hybrid

$110K - $130K/yr

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

Posted 28 days ago


Job description

Associate / IT Security Vulnerability Specialist (0036)

OCT Consulting is a management and technology consulting firm that supports Federal Government clients. We provide consulting services in the areas of Data Analytics, Change Management, Program and Project Management, Acquisition/Procurement, and Information Technology.

OCT is currently looking for anย Associate to join our growing Cybersecurity practice.ย This position will primarily support a federal client as an IT Security Vulnerability Specialist, which is a hybrid position requiring at least 3 days per week onsite in Suitland, MD. The ideal candidate will be proficient in key areas of security such as: Vulnerability Management, Intrusion Prevention and Detection, Access Control and Authorization, Policy Enforcement, Application Security, Protocol Analysis, Firewall Management, Incident Response, Data Loss Prevention (DLP), Encryption, Two-Factor Authentication, Web filtering, and Advanced Threat Protection.

Responsibilities will include, but are not limited to:

  • Lead and drive remediation efforts within government environment to increase the efficiency of vulnerability management processes.
  • Articulate risk and impact to product, engineering and other business leaders with the ability to convey the urgency and need to remediate a vulnerability commensurate with the risk it presents to the enterprise.
  • Conduct internal vulnerability assessments and vulnerability analysis upon external vulnerability reports, zero-day announcements, security incidents etc.
  • Monitor and maintain vulnerability and code scanning, security configuration and other vulnerability management tools.
  • Develop, maintain, and recommend security policies, procedures, and standards related to vulnerability management.
  • Participate in security audits and assessments to ensure compliance with regulatory requirements and industry standards.
  • Perform vulnerability re-production and fix validation of vulnerabilities where required.
  • Maintain strong knowledge of ongoing security threats, remediations and operational best practices in the threat and vulnerability management.
  • Create reports and dashboards to drive vulnerability remediation efforts and process improvements.
  • Drive regular operational and business reviews for threat and vulnerability management activities.
  • Support other security operation activities as needed (e.g. detection and response).
  • Participate in the Security Incident response.
  • Review, evaluate, refine, release and maintain Configuration Management Plans in support of program requirements.
  • Provide recommendations and guidance for the identification of Configuration Items (CI) and Computer Software Configuration Items (CSCI).
  • Provide guidance and expertise in the establishment, monitoring and maintenance of configuration baselines on assigned programs.
  • Monitor effectiveness and compliance on assigned programs.

Requirements

Requirements:

  • 7+ years of experience with A&A support.
  • Proficient in all steps in the NIST RMF framework
  • Knowledgeable in NIST special publications such as 800-53 & 800-53A
  • Bachelor's degree or equivalent experience
  • In-depth understanding and hands-on experience with multiple vulnerability scanning platforms, to include scanning with Security Technical Information Guides (STIG) and CIS benchmarks.
  • MS Excel proficiency.
  • A related industry certification such as GIAC GEVA, CASP, CAP, CISSP, CISM, GSEC, GMON, Security+.
  • Must be a US Citizen.
  • SECRET clearance required

Benefits

Benefits

ย The position includes competitive compensation and a full suite of benefits:

  • Medical, Dental, and Vision insurance
  • Retirement savings 401K plan provided by an industry-leading provider with 3% employer contributions.
  • Paid Time Off
  • Life Insurance, Short- and Long-Term Disability benefits
  • Training Benefits

Salary: $110,000-$130,000 to commensurate with experience, education, etc.ย 

About OCT Consulting

OCT Consulting LLC is a Smallย Business (SB) providing professional services and information technology solutions to the Federal government and commercial clients. Founded in 2013, we bring the agility of operations and a management team with a track record of leading successful engagements at major Federal government agencies.
At OCT we believe in creating a work environment where employees can thrive based on their abilities, skills, and achievements. We are dedicated to providing career growth and professional development based on individual merit and fostering a workplace where everyone's contributions are valued and recognized.