Vulnerability Analyst
Washington, DC · On-site
They are seeking a Senior Vulnerability Analyst to lead vulnerability management processes, conduct scans, prioritize vulnerabilities, and provide recommendations to mitigate risks across enterprise ...
Vulnerability Analyst
Washington, DC · On-site
They are seeking a Senior Vulnerability Analyst to lead vulnerability management processes, conduct scans, prioritize vulnerabilities, and provide recommendations to mitigate risks across enterprise ...
Senior Vulnerability Engineer
$117.20K - $160.70K/yr
Design and implement scalable vulnerability scanning and asset discovery solutions across multi-cloud and SaaS environments * Engineer and maintain integrations between vulnerability management tools ...
Senior Vulnerability Engineer
$117.20K - $160.70K/yr
Design and implement scalable vulnerability scanning and asset discovery solutions across multi-cloud and SaaS environments * Engineer and maintain integrations between vulnerability management tools ...
This role is responsible for conducting vulnerability scanning and analysis, supporting remediation efforts, maintaining scan operations, and helping improve enterprise visibility into security ...
This role is responsible for conducting vulnerability scanning and analysis, supporting remediation efforts, maintaining scan operations, and helping improve enterprise visibility into security ...
Responsibilities : • Administer and maintain enterprise vulnerability scanning platforms. • Support configuration and sustainment of Assured Compliance Assessment Solution (ACAS). • Perform ...
Responsibilities : • Administer and maintain enterprise vulnerability scanning platforms. • Support configuration and sustainment of Assured Compliance Assessment Solution (ACAS). • Perform ...
Review and validate vulnerability scan results from infrastructure, endpoints, applications, containers, cloud platforms, and other technology assets. * Analyze vulnerabilities for exploitability ...
Review and validate vulnerability scan results from infrastructure, endpoints, applications, containers, cloud platforms, and other technology assets. * Analyze vulnerabilities for exploitability ...
Experience with vulnerability scanning tools (e.g., Tenable, Qualys, Rapid7). * Familiarity with SIEM tools and security monitoring platforms. * Knowledge of cloud and hybrid environments. * Strong ...
Quick apply
Experience with vulnerability scanning tools (e.g., Tenable, Qualys, Rapid7). * Familiarity with SIEM tools and security monitoring platforms. * Knowledge of cloud and hybrid environments. * Strong ...
Scanning & Detection: Conduct regular, scheduled, and on-demand vulnerability scans of servers, networks, applications, and cloud environments. * Manage the regular scanning of Marvell ...
Scanning & Detection: Conduct regular, scheduled, and on-demand vulnerability scans of servers, networks, applications, and cloud environments. * Manage the regular scanning of Marvell ...
FCC - Vulnerability Management Analyst
Washington, DC · On-site +1
Experience with vulnerability scanning tools (e.g., Tenable, Qualys, Rapid7). * Familiarity with SIEM tools and security monitoring platforms. * Knowledge of cloud and hybrid environments. * Strong ...
FCC - Vulnerability Management Analyst
Washington, DC · On-site +1
Experience with vulnerability scanning tools (e.g., Tenable, Qualys, Rapid7). * Familiarity with SIEM tools and security monitoring platforms. * Knowledge of cloud and hybrid environments. * Strong ...
Senior Security Vulnerability Analyst
Washington, DC · On-site
$55 - $65/hr
Experience with security technologies, including vulnerability scanners and SIEM solutions. * Familiarity with relevant industry standards and regulations. * Experience in identifying and developing ...
Quick apply
Senior Security Vulnerability Analyst
Washington, DC · On-site
$55 - $65/hr
Experience with security technologies, including vulnerability scanners and SIEM solutions. * Familiarity with relevant industry standards and regulations. * Experience in identifying and developing ...
Administer and maintain enterprise vulnerability scanning platforms . * Support configuration and sustainment of Assured Compliance Assessment Solution (ACAS) . * Perform vulnerability scanning ...
Administer and maintain enterprise vulnerability scanning platforms . * Support configuration and sustainment of Assured Compliance Assessment Solution (ACAS) . * Perform vulnerability scanning ...
Responsibilities : • Administer and maintain enterprise vulnerability scanning platforms. • Support configuration and sustainment of Assured Compliance Assessment Solution (ACAS). • Perform ...
Responsibilities : • Administer and maintain enterprise vulnerability scanning platforms. • Support configuration and sustainment of Assured Compliance Assessment Solution (ACAS). • Perform ...
Responsibilities : • Operate and maintain vulnerability scanning infrastructure across cloud, on-prem, and endpoint environments. • Execute regular vulnerability scans and manage scan schedules ...
Responsibilities : • Operate and maintain vulnerability scanning infrastructure across cloud, on-prem, and endpoint environments. • Execute regular vulnerability scans and manage scan schedules ...
Engage with system and application administrators and Federal counterparts to troubleshoot issues associated with endpoint vulnerability scanning * Work Cyber related security operations ITSM ...
Engage with system and application administrators and Federal counterparts to troubleshoot issues associated with endpoint vulnerability scanning * Work Cyber related security operations ITSM ...
FCC - Vulnerability Management Lead
Washington, DC · On-site +1
Experience with vulnerability scanning tools (e.g., Tenable/Nessus, Qualys). * Strong understanding of CVSS scoring, risk prioritization, and remediation workflows. * Familiarity with patch ...
FCC - Vulnerability Management Lead
Washington, DC · On-site +1
Experience with vulnerability scanning tools (e.g., Tenable/Nessus, Qualys). * Strong understanding of CVSS scoring, risk prioritization, and remediation workflows. * Familiarity with patch ...
Experience with vulnerability scanning tools (e.g., Tenable/Nessus, Qualys). * Strong understanding of CVSS scoring, risk prioritization, and remediation workflows. * Familiarity with patch ...
Quick apply
Experience with vulnerability scanning tools (e.g., Tenable/Nessus, Qualys). * Strong understanding of CVSS scoring, risk prioritization, and remediation workflows. * Familiarity with patch ...
Experience with Tenable Security Center Continuous View, Log Correlation Engine, and Passive Vulnerability Scanner * Certified in one of the following: * Certified Information Systems Security ...
Experience with Tenable Security Center Continuous View, Log Correlation Engine, and Passive Vulnerability Scanner * Certified in one of the following: * Certified Information Systems Security ...
Responsibilities : • Operate and maintain vulnerability scanning infrastructure across cloud, on-prem, and endpoint environments. • Execute regular vulnerability scans and manage scan schedules ...
Responsibilities : • Operate and maintain vulnerability scanning infrastructure across cloud, on-prem, and endpoint environments. • Execute regular vulnerability scans and manage scan schedules ...
Responsibilities : • Operate and maintain vulnerability scanning infrastructure across cloud, on-prem, and endpoint environments. • Execute regular vulnerability scans and manage scan schedules ...
Responsibilities : • Operate and maintain vulnerability scanning infrastructure across cloud, on-prem, and endpoint environments. • Execute regular vulnerability scans and manage scan schedules ...
Operate and maintain vulnerability scanning infrastructure across cloud, on-prem, and endpoint environments. * Execute regular vulnerability scans and manage scan schedules, policies, and agent ...
Operate and maintain vulnerability scanning infrastructure across cloud, on-prem, and endpoint environments. * Execute regular vulnerability scans and manage scan schedules, policies, and agent ...
Key Responsibilities Vulnerability Assessment Conduct regular vulnerability scans across infrastructure, networks, cloud environments, and applications Utilize automated tools and manual techniques ...
Quick apply
Key Responsibilities Vulnerability Assessment Conduct regular vulnerability scans across infrastructure, networks, cloud environments, and applications Utilize automated tools and manual techniques ...
Vulnerability Scanner information
See salary details
$9.62 - $10.82
1% of jobs
$10.82 - $12.02
0% of jobs
$12.02 - $13.22
9% of jobs
$14.19 is the 25th percentile. Wages below this are outliers.
$13.22 - $14.42
19% of jobs
The median wage is $15.52 / hr.
$14.42 - $15.63
23% of jobs
$15.63 - $16.83
17% of jobs
$17.30 is the 75th percentile. Wages above this are outliers.
$16.83 - $18.03
15% of jobs
$18.03 - $19.23
6% of jobs
$19.23 - $20.43
5% of jobs
$20.43 - $21.63
2% of jobs
$21.63 - $22.84
2% of jobs
$9
$16
$22
How much do vulnerability scanner jobs pay per hour?
As of May 29, 2026, the average hourly pay for vulnerability scanner in the United States is $16.16, according to ZipRecruiter salary data. Most workers in this role earn between $14.18 and $17.31 per hour, depending on experience, location, and employer.
What are the key skills and qualifications needed to thrive as a Vulnerability Scanner, and why are they important?
To thrive as a Vulnerability Scanner, you need a solid understanding of cybersecurity principles, network protocols, and operating systems, often supported by relevant certifications like CompTIA Security+ or CEH. Familiarity with vulnerability scanning tools such as Nessus, OpenVAS, and Qualys, as well as knowledge of ticketing systems and reporting platforms, is typically required. Analytical thinking, attention to detail, and effective communication are vital soft skills for identifying risks and sharing findings with technical and non-technical stakeholders. These skills are crucial to accurately detect vulnerabilities, prioritize threats, and help organizations strengthen their security posture.
How does a Vulnerability Scanner typically collaborate with IT and security teams during a vulnerability assessment?
Vulnerability Scanners work closely with both IT and security teams to ensure comprehensive assessments of network and application vulnerabilities. They often coordinate with system administrators to schedule scans, minimize disruptions, and gain necessary access. After identifying vulnerabilities, they discuss findings with security analysts to prioritize remediation efforts and provide actionable recommendations. Effective communication and teamwork are essential, as scanners must translate technical results into understandable risks for various stakeholders.
What are vulnerability scanners?
Vulnerability scanners are specialized software tools designed to automatically identify security weaknesses in computer systems, networks, and applications. They work by scanning for known vulnerabilities, misconfigurations, and outdated software that could be exploited by cyber attackers. These tools help organizations proactively find and fix security issues before they can be compromised. Regular use of vulnerability scanners is a key part of maintaining strong cybersecurity defenses.
What is the difference between Vulnerability Scanner vs Penetration Tester?
| Aspect | Vulnerability Scanner | Penetration Tester |
|---|---|---|
| Credentials | Certifications like CompTIA Security+, CEH, CISSP often preferred | Certifications like OSCP, CEH, GPEN often required |
| Work Environment | Primarily software-based, automated scanning tools | Hands-on testing, manual exploitation, on-site or remote |
| Industry Usage | Used by security teams for vulnerability assessment | Engaged for in-depth security testing and exploitation |
While vulnerability scanners automatically identify security weaknesses, penetration testers perform manual testing to exploit vulnerabilities. Both roles are essential for comprehensive security, but they differ in approach and depth of testing.
More about Vulnerability Scanner jobs
What states have the most Vulnerability Scanner jobs? States with the most job openings for Vulnerability Scanner jobs include:
What job categories do people searching Vulnerability Scanner jobs look for? The top searched job categories for Vulnerability Scanner jobs are:
Booz Allen Hamilton rating
8.8
Based on 47 frontline employees who took The Breakroom Quiz
8th of 57 rated business consultants
Job description
Job Summary:
Booz Allen Hamilton is a leading consulting firm that provides solutions to government clients in cybersecurity. They are seeking a Senior Vulnerability Analyst to lead vulnerability management processes, conduct scans, prioritize vulnerabilities, and provide recommendations to mitigate risks across enterprise systems.
Responsibilities:
• Lead the enterprise vulnerability management process in support of continuous monitoring and RMF requirements.
• Conduct regular vulnerability, compliance, and discovery scans using tools such as Tenable and Qualys, and interpret scan results.
• Validate and prioritize discovered vulnerabilities based on exploitability, threat intelligence, and business risk.
• Coordinate with system owners and administrators to track and measure remediation efforts and verify closure.
• Provide technical recommendations to mitigate risks identified through assessments.
• Create and maintain dashboards, metrics, key performance indicators, and executive-level reports on vulnerability status and trends.
Qualifications:
Required:
• 8+ years of experience in vulnerability management and analysis
• Experience working in an environment with SOC operations and cybersecurity engineers
• Experience with enterprise vulnerability scanning tools, such as Tenable.sc, Nessus, or Qualys
• Experience generating reports to measure progress in meeting vulnerability remediation targets
• Experience monitoring compliance with BOD 22-01, including tracking vulnerabilities against Known Exploited Vulnerabilities (KEV) Catalog, and BOD 23-01, including asset discovery and vulnerability enumeration
• Knowledge of CVSS, CWE, NVD, and threat intelligence sources
• Ability to evaluate the risk of all identified vulnerabilities and prepare remediation instructions for system administrators
• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements
• Bachelor’s degree
Preferred:
• Knowledge of NIST 800-53 and other federal cybersecurity frameworks
• CEH, CySA+, CASP+, CISSP, or Tenable Certification
Company:
Booz Allen Hamilton is a consulting firm that specializes in analytics, technology, and engineering. Founded in 1914, the company is headquartered in Mclean, USA, with a team of 10001+ employees. The company is currently Late Stage.
Booz Allen Hamilton is a leading consulting firm that provides solutions to government clients in cybersecurity. They are seeking a Senior Vulnerability Analyst to lead vulnerability management processes, conduct scans, prioritize vulnerabilities, and provide recommendations to mitigate risks across enterprise systems.
Responsibilities:
• Lead the enterprise vulnerability management process in support of continuous monitoring and RMF requirements.
• Conduct regular vulnerability, compliance, and discovery scans using tools such as Tenable and Qualys, and interpret scan results.
• Validate and prioritize discovered vulnerabilities based on exploitability, threat intelligence, and business risk.
• Coordinate with system owners and administrators to track and measure remediation efforts and verify closure.
• Provide technical recommendations to mitigate risks identified through assessments.
• Create and maintain dashboards, metrics, key performance indicators, and executive-level reports on vulnerability status and trends.
Qualifications:
Required:
• 8+ years of experience in vulnerability management and analysis
• Experience working in an environment with SOC operations and cybersecurity engineers
• Experience with enterprise vulnerability scanning tools, such as Tenable.sc, Nessus, or Qualys
• Experience generating reports to measure progress in meeting vulnerability remediation targets
• Experience monitoring compliance with BOD 22-01, including tracking vulnerabilities against Known Exploited Vulnerabilities (KEV) Catalog, and BOD 23-01, including asset discovery and vulnerability enumeration
• Knowledge of CVSS, CWE, NVD, and threat intelligence sources
• Ability to evaluate the risk of all identified vulnerabilities and prepare remediation instructions for system administrators
• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements
• Bachelor’s degree
Preferred:
• Knowledge of NIST 800-53 and other federal cybersecurity frameworks
• CEH, CySA+, CASP+, CISSP, or Tenable Certification
Company:
Booz Allen Hamilton is a consulting firm that specializes in analytics, technology, and engineering. Founded in 1914, the company is headquartered in Mclean, USA, with a team of 10001+ employees. The company is currently Late Stage.
What Booz Allen Hamilton employees say
Pay
Benefits
Hours and flexibility
Workplace
Get the full story on Breakroom
About Booz Allen Hamilton
Sourced by ZipRecruiter
Booz Allen Hamilton is a leading provider of management and technology consulting services to the US government in defense, intelligence, and civil markets. Headquartered in McLean, Virginia, the firm also serves major corporations, institutions, and not-for-profit organizations. Founded in 1914 by Edwin G. Booz, the company has a long-standing tradition of helping clients achieve success by delivering a wide range of consulting services that include strategic planning, human capital and learning, communication, systems development, and others. The company's mission is to empower people to change the world, and it has a reputation for maintaining the highest standards of integrity and-excellence.
Industry
It services
Company size
10,000+ Employees
Headquarters location
McLean, VA, US
Year founded
1914