ZipRecruiter

Log In

1

Vulnerability Jobs in Washington (NOW HIRING)

asrcfh

Vulnerability Assessor

Alexandria, VA · Hybrid

Vulnerability Assessor Location: Alexandria, VA (Hybrid - Telework with periodic on-site support as required) Clearance: Active Secret Position Overview ASRC Federal is seeking a Vulnerability ...

asrcfh

Vulnerability Assessor

Alexandria, VA · Hybrid

Vulnerability Assessor Location: Alexandria, VA (Hybrid - Telework with periodic on-site support as required) Clearance: Active Secret Position Overview ASRC Federal is seeking a Vulnerability ...

Signal Hill Technologies

Vulnerability Analyst

Fairfax, VA · On-site

$100K - $130K/yr

Vulnerability Analyst Location: Fairfax, VA (On-site, full-time) Employment Type: Full-time Status: Contingent upon contract award Signal Hill Technologies is seeking a highly skilled Vulnerability ...

AnaVation

Vulnerability Manager

Alexandria, VA · On-site

AnaVation is searching for a Vulnerability Manager to assist client leadership with the enterprise vulnerability management program, administering scanning platforms (Tenable and/or Qualys), driving ...

SES

Vulnerability Analyst

Reston, VA · On-site

Vulnerability Analyst Top 5 Technical Skills: * Tenable * Qualys * MS Office * Experience with CVE * Experience with Vulnerabilty Management Top 2 Soft Skills: * Great written and verbal ...

AnaVation

Vulnerability Manager

Alexandria, VA · On-site +1

AnaVation is searching for a Vulnerability Manager to assist client leadership with the enterprise vulnerability management program, administering scanning platforms (Tenable and/or Qualys), driving ...

AnaVation

Vulnerability Manager

Alexandria, VA · On-site +1

AnaVation is searching for a Vulnerability Manager to assist client leadership with the enterprise vulnerability management program, administering scanning platforms (Tenable and/or Qualys), driving ...

kgs

Vulnerability Analyst II

Washington, DC

The Vulnerability Analyst II will serve as a mid-level vulnerability management professional responsible for conducting vulnerability assessments, analyzing scan results, tracking remediation ...

kgs

Vulnerability Analyst II

Washington, DC

The Vulnerability Analyst II will serve as a mid-level vulnerability management professional responsible for conducting vulnerability assessments, analyzing scan results, tracking remediation ...

Koniag, Inc.

Vulnerability Analyst II

Washington, DC · On-site

$110K - $136K/yr

The Vulnerability Analyst II will serve as a mid-level vulnerability management professional responsible for conducting vulnerability assessments, analyzing scan results, tracking remediation ...

TIME Systems

Vulnerability Management Analyst

MD · On-site

Vulnerability Management Analyst Location- Joint Base Andrews, MD Clearance- Secret Certifications- CompTIA Security+ or equivalent About TIME Systems At TIME Systems, we are at the forefront of ...

JCS Solutions LLC

ISSO - Vulnerability Management

MD · On-site

$100K - $114K/yr

The ISSO - Vulnerability Management will play a critical role in maintaining the cybersecurity posture of enterprise systems supporting national defense missions. This position is responsible for ...

TekSynap

Vulnerability Management

Andrews, MD · On-site

Prepare and deliver vulnerability reports, compliance dashboards, and metrics for leadership and inspection readiness (e.g., CCRI/CORA). * Support the development and maintenance of asset groupings ...

next page

Showing results 1-20

All JobsVulnerability JobsVulnerability Jobs in Washington

Vulnerability information

See Washington salary details

$42.5K

$122.2K

$162K

How much do vulnerability jobs pay per year?

As of Jul 26, 2026, the average yearly pay for vulnerability in Washington is $122,210.00, according to ZipRecruiter salary data. Most workers in this role earn between $106,500.00 and $133,100.00 per year, depending on experience, location, and employer.

What are some common challenges faced by professionals working in vulnerability management roles?

Professionals in vulnerability management often face the challenge of keeping up with constantly evolving threats and newly discovered vulnerabilities. Prioritizing which vulnerabilities to address first, especially in large environments with thousands of potential risks, can be demanding. Collaborating with IT, development, and security teams to ensure timely remediation and maintaining clear communication about risk levels are also essential parts of the role. Additionally, balancing the need for quick patching with the risk of disrupting business operations requires careful judgment.

What is the difference between Vulnerability vs Penetration Tester?

AspectVulnerabilityPenetration Tester
Primary FocusIdentifying security weaknesses and vulnerabilities in systemsSimulating cyberattacks to exploit vulnerabilities and test defenses
CertificationsCompTIA Security+, CEH, OSCP (for some roles)OSCP, CEH, GPEN, CISSP (often overlapping)
Work EnvironmentSecurity analysis, vulnerability scanning, reportingActive testing, exploitation, reporting
Industry UsageSecurity assessment, risk managementSecurity testing, red teaming

Vulnerability specialists focus on identifying weaknesses in systems, while penetration testers actively exploit those vulnerabilities to assess security effectiveness. Both roles require similar certifications and work in cybersecurity, but their methods and objectives differ: vulnerability analysts aim to find issues, whereas penetration testers simulate attacks to evaluate defenses.

What are the key skills and qualifications needed to thrive as a Vulnerability Analyst, and why are they important?

To thrive as a Vulnerability Analyst, you need a solid understanding of network security, operating systems, and vulnerability assessment methodologies, typically supported by a degree in cybersecurity or IT and relevant certifications like CompTIA Security+ or CEH. Familiarity with tools such as Nessus, OpenVAS, Metasploit, and vulnerability management platforms is essential. Strong analytical thinking, attention to detail, and effective communication help in identifying risks and explaining findings to diverse stakeholders. These skills ensure timely detection and remediation of security weaknesses, protecting organizations from cyber threats.

What are the 4 types of vulnerabilities?

In cybersecurity, vulnerabilities are typically classified into four main types: technical vulnerabilities, such as software bugs and misconfigurations; operational vulnerabilities, related to processes and procedures; physical vulnerabilities, involving hardware and infrastructure; and human vulnerabilities, which stem from user errors or social engineering. Identifying and addressing these types helps security professionals protect systems effectively.

Can you make $500,000 a year in cyber security?

Vulnerability analysts and cybersecurity professionals can potentially earn $500,000 annually with advanced skills, extensive experience, specialized certifications, and roles in high-paying industries or senior management positions. Achieving this level often requires expertise in areas like penetration testing, security architecture, or executive leadership, along with a strong professional network and ongoing education.

Can you make $200,000 in cyber security?

Vulnerability analysts and cybersecurity professionals can earn $200,000 or more annually, especially with advanced skills, certifications like CISSP or CISA, and experience in high-demand areas such as penetration testing or security architecture. Salaries vary based on location, industry, and level of expertise, with senior roles and managerial positions typically offering higher compensation.

What is a vulnerability specialist?

A vulnerability specialist is a cybersecurity professional who identifies, assesses, and prioritizes security weaknesses in computer systems, networks, and applications. They often use tools like vulnerability scanners and may hold certifications such as CISSP or CEH to perform risk analysis and recommend mitigation strategies.

What are vulnerability analysts?

Vulnerability analysts are cybersecurity professionals who identify, assess, and help remediate security weaknesses in computer systems, networks, and software. They use various tools and techniques to scan for vulnerabilities, analyze threats, and recommend solutions to mitigate risks. Their work is crucial in preventing cyberattacks and ensuring the security of organizational assets. Vulnerability analysts often collaborate with IT and security teams to prioritize and address vulnerabilities based on their potential impact.
What are the most commonly searched types of Vulnerability jobs in Washington? The most popular types of Vulnerability jobs in Washington are:
What are popular job titles related to Vulnerability jobs in Washington? For Vulnerability jobs in Washington, the most frequently searched job titles are:
What job categories do people searching Vulnerability jobs in Washington look for? The top searched job categories for Vulnerability jobs in Washington are:
Vulnerability jobs near you
Infographic showing various Vulnerability job openings in Washington as of July 2026, with employment types broken down into 90% Full Time, 5% Part Time, and 5% Contract. Highlights an 86% Physical, 5% Hybrid, and 9% Remote job distribution, with an average salary of $122,210 per year, or $58.8 per hour.

Vulnerability Assessor

asrcfh

Alexandria, VA • Hybrid

Other

Posted 15 days ago

Job description

Vulnerability Assessor

Location: Alexandria, VA (Hybrid – Telework with periodic on-site support as required)
Clearance: Active Secret

Position Overview

ASRC Federal is seeking a Vulnerability Assessor to support the Department of War Education Activity (DoWEA) Enterprise Cyber Program. The Vulnerability Assessor will identify, analyze, and track system vulnerabilities to strengthen the organization’s cybersecurity posture and ensure compliance with DoD Risk Management Framework (RMF) requirements. This role supports Continuous Monitoring (ConMon) activities and works closely with cybersecurity and system teams to enhance DoWEA’s enterprise-wide security operations.

Responsibilities

  • Conduct vulnerability scans using ACAS (Tenable/Nessus), STIG Viewer, and related DoD-approved assessment tools.

  • Categorize and analyze vulnerabilities in accordance with NIST SP 800-53, DISA STIGs, and DoDI 8510.01 (RMF).

  • Collaborate with Information System Security Managers (ISSMs), Information System Security Officers (ISSOs), and system administrators to track remediation and update Plans of Action and Milestones (POA&Ms).

  • Prepare and maintain vulnerability assessment reports and risk summaries for leadership.

  • Support RMF Steps 3–6 and Continuous Monitoring documentation within eMASS.

  • Research and evaluate emerging technologies to identify new or evolving risks and recommend mitigation strategies.

Basic Qualifications

  • Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related discipline (four additional years of equivalent experience may substitute).

  • Minimum 5+ years of cybersecurity or vulnerability management experience.

  • Active DoD Secret clearance

  • DoD 8570.01-M IAT Level II certification (e.g., Security+ CE, CySA+, CCNA-Security).

  • Hands-on experience with ACAS (Tenable/Nessus) and STIG compliance tools.

  • Strong analytical, documentation, and communication skills.

  • Working knowledge of vulnerability scanning, risk assessment methodologies, and remediation tracking.

Preferred Qualifications

  • Familiarity with DoW (DoD) RMF, eMASS, and DISA STIG/SRG compliance.

  • Understanding of NIST SP 800-53, CNSSI 1253, and DoDI 8510.01 frameworks.

  • Knowledge of common cybersecurity threats, exploits, and attack vectors.

  • Experience supporting federal or DoD IT environments.

  • Positive, proactive approach and ability to collaborate effectively across remote and on-site teams.

Apply