Senior Vulnerability Management Analyst
Share
Job Location:
Bethesda, MD - USA
Monthly Salary:
$ 104000 - 166000
Posted on:
9 hours ago
Vacancies:
1 Vacancy
Job Summary
Responsibilities
The Vulnerability Management Analyst will support the Federal Aviation Administration (FAA) under the BNATCS contract providing specialized cybersecurity and risk management services to help protect National Airspace System (NAS) systems enterprise infrastructure and critical mission applications. This role focuses on identifying analyzing tracking and mitigating vulnerabilities across FAA environments ensuring compliance with federal security requirements and contributing to a proactive cybersecurity posture.
Key Responsibilities may include-
Vulnerability Identification & Analysis
- Perform regular vulnerability scanning of FAA networks systems and applications using FAA-approved toolsets (e.g. Tenable Nessus Qualys ACAS Rapid7).
- Analyze scan results to identify threats misconfigurations and weaknesses across FAA environments.
- Validate findings assess severity and risk impact and distinguish false positives from actionable vulnerabilities.
Risk Prioritization & Reporting
- Prioritize vulnerabilities based on FAA risk models mission impact threat intelligence and criticality of affected assets.
- Prepare detailed vulnerability and risk reports for FAA stakeholders ISSOs SOC teams and system owners.
- Support creation of dashboards metrics and trend analyses to measure vulnerability remediation performance.
Remediation Coordination
- Collaborate with FAA system owners network engineers developers and operations teams to drive timely remediation of findings.
- Track remediation efforts document mitigation strategies and verify closure of vulnerabilities.
- Provide technical recommendations to reduce exposure and strengthen system defenses.
Compliance & Governance
- Support adherence to federal cybersecurity frameworks including NIST 800-53 NIST CSF FISMA TIC and FAA information security policies.
- Assist with POA&M (Plan of Action & Milestones) documentation updates and lifecycle management.
- Participate in ATO (Authorization to Operate) and continuous monitoring activities within the RMF process.
Continuous Improvement & Security Enhancement
- Contribute to development and refinement of vulnerability management procedures SOPs and scanning schedules.
- Stay current with emerging threats CVEs and security advisories relevant to aviation and federal agencies.
- Support incident response teams by providing vulnerability insights that inform threat analysis and containment.
** This offer is contingent upon Peratons award of the associated contract **
Qualifications
Required Qualifications
- Minimum of a Bachelors degree and 8 years of experience a Masters degree and 6 years of relevent experience or a PhD and 3 years of experience in vulnerability management cybersecurity operations or IT security. Cybersecurity IT Computer Science or related degrees are preferred.
- Working knowledge of vulnerability scanning tools (Tenable Qualys etc.) and security information platforms.
- Understanding of NIST RMF FISMA and federal security policies.
- Experience analyzing CVEs CVSS scoring and vulnerability exploitability.
- Strong analytical communication and documentation skills.
- Ability to obtain and maintain the required Public Trust clearance.
- This is a remote capable position however candidates must reside in the Maryland/DC/NoVA local area.
Preferred Qualifications
- Prior experience supporting FAA DOT or other federal cybersecurity programs.
- Familiarity with National Airspace System (NAS) environments or aviation technology.
- Certifications such as Security CySA CEH GSEC GCIH or similar.
- Experience with POA&M management RMF packages or continuous monitoring activities.
- Knowledge of configuration management and patch management processes.
Peraton Overview
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the worlds leading mission capability integrator and transformative enterprise IT provider we deliver trusted highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land sea space air and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day our employees do the cant be done by solving the most daunting challenges facing our customers. Visit to learn how were keeping people around the world safe and secure.
Target Salary Range
EEO
Required Experience:
Senior IC
Key Skills
- Active Directory
- Customer Service
- End user
- Access Points
- Deskside Support
- Windows
- SCCM
- Troubleshoot
- User Accounts
- Desktop
- PC
- Backup
- Setup
- hardware
- Technical Support
About Company
Peraton provides innovative solutions for the most sensitive and critical programs in government today, developed and executed by scientists, engineers, and other experts.
