Vulnerability Management Analyst
Vulnerability Management Analyst
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
$ 55250 - 99875
1 Vacancy
Job Description
The Leidos Digital Modernization Sector has a career opportunity for a Vulnerability Management Analyst to support the Air Force National Capitol Region IT Services program at Joint Base Andrews MD.
Job Summary:
The AFNCR IT Services program provides support services for information systems for Headquarters Air Force (HAF) Air Force District of Washington (AFDW) Office of the Secretary of Defense (OSD) Joint Chiefs of Staff and other Air Force activities within the AFNCR missions to include the Pentagon Joint Base Andrews (JBA) Joint Base Anacostia-Bolling (JBAB) and other locations leased spaces and alternate sites. The major support areas required are IT Operations and Maintenance; Plans Projects and Engineering (PP&E); and National Military Command Center (NMCC). The senior leaders and national defense missions that are supported require that the AFNCR operations never fail resulting in a fast-paced challenging but also rewarding environment.
If this sounds like the kind of environment where you can thrive keep reading!
Leidos Defense Group provides a diverse portfolio of systems solutions and services covering land sea air space and cyberspace for customers worldwide. Solutions for Defense include enterprise and mission IT large-scale intelligence systems command and control geospatial and data analytics cybersecurity logistics training and intelligence analysis and operations support. Our team is solving the worlds toughest security challenges for customers with cant fail missions.
Are you ready to make an impact Begin your journey of a flourishing and meaningful career share your resume with us today!
POSITION SUMMARY:
Leidos is seeking a Vulnerability Management Analyst to join our Cybersecurity Operations team supporting the AFNCR IT Services (AFNCRIT) program. This T1-level position is ideal for an entry-level cybersecurity professional interested in learning vulnerability management processes. The role will assist with running vulnerability scans using ACAS reviewing STIG findings and supporting remediation coordination across Air Force enterprise systems under the guidance of senior team members.
PRIMARY RESPONSIBILITIES:
Assist with scheduling and running vulnerability scans using Tenable SecurityCenter/Nessus (ACAS) in classified and unclassified environments under senior staff guidance.
Review scan results to help identify potential CAT I/II/III findings false positives and basic configuration issues.
Support tracking of remediation actions Plans of Action and Milestones (POA&Ms) and exceptions in accordance with RMF guidance.
Follow established procedures to validate DISA STIG checklists and work with team members to ensure secure system configurations.
Help prepare basic vulnerability reports compliance summaries and metrics to support leadership briefings and inspection readiness (e.g. CCRI/CORA).
Assist in maintaining asset groupings scan zones and credentialed scanning configurations as directed by senior analysts.
Coordinate with Queue Managers ISSOs and Engineering teams to support the remediation of high-priority vulnerabilities.
Maintain data accuracy within ACAS including proper tagging and grouping for consistent reporting.
BASIC QUALIFICATIONS:
Requires a Bachelors degree and less than 2 years of prior relevant experience additional years of experience will be accepted in lieu of a degree.
Active DoD Secret clearance required.
CompTIA Security CE or higher DoD 8570 IAT Level II certification must meet 8140 ISSM role qualification.
3 years of cybersecurity or system administration experience with at least 1 year of direct ACAS or Tenable experience.
Working knowledge of DISA STIGs vulnerability risk levels and POA&M remediation strategies.
Familiarity with NIST SP 800-53 RMF compliance and Air Force cybersecurity policy (AFMAN 17-130).
Strong attention to detail documentation skills and the ability to interpret technical vulnerability data.
PREFERRED QUALIFICATIONS:
Experience supporting USAF DISA or other DoD mission systems.
Familiarity with eMASS SCAP Compliance Checker (SCC) or HBSS.
Prior involvement in CCRI/CORA preparation or vulnerability remediation campaigns.
Ability to communicate risk-based recommendations to both technical and non-technical stakeholders.
Understanding of automation tools/scripts (e.g. PowerShell Nessus APIs) to support scan or report optimization.
At Leidos we dont want someone who fits the moldwe want someone who melts it down and builds something better. This is a role for the restless the over-caffeinated the ones who ask whats next before the dust settles on whats now.
If youre already scheming step 20 while everyone else is still debating step 2 good. Youll fit right in.
Original Posting:
August 25 2025At Leidos we dont want someone who fits the moldwe want someone who melts it down and builds something better. This is a role for the restless the over-caffeinated the ones who ask whats next before the dust settles on whats now.
If youre already scheming step 20 while everyone else is still debating step 2 good. Youll fit right in.
Pay Range:
Pay Range $55250.00 - $99875.00The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job education experience knowledge skills and abilities as well as internal equity alignment with market data applicable bargaining agreement (if any) or other law.
Required Experience:
IC
Employment Type
Full-Time
