Vulnerability Assessment Analyst

San Antonio, TX

Full-time

Onsite

$62K/yr - $141K/yr

Entry, Mid Level

Booz Allen Hamilton is a leading firm in cybersecurity, dedicated to helping clients mitigate vulnerabilities and enhance security strategies. As a Vulnerability Assessment Analyst, you will evaluate risks, monitor security environments, and provide actionable recommendations to strengthen defenses against cyber threats.

Apply Now

Responsibilities

Monitoring the network environment for new and evolving threats
Analyzing integrated Validated Online Lifecycle Threat (VOLT) Reports with all-source intelligence
Supporting damage assessment activities to assess adversary capabilities
Performing vulnerability scanning, assessment, and remediation tracking within DoD or Intelligence Community environments
Generating and maintaining Plan of Action and Milestones (POA&M) documentation
Reviewing and tracking security exceptions documentation
Analyzing scan results, assessing system risks, and developing mitigation strategies in coordination with system owners
Coordinating and escalating vulnerability remediation efforts with technical and functional teams
Providing RMF and audit support

Qualification

Required

2+ years of experience in Cybersecurity
Experience performing vulnerability scanning, assessment, and remediation tracking within DoD or Intelligence Community environments
Experience with vulnerability management tools, such as ACAS, Tenable.sc, Nessus, or Qualys
Experience generating and maintaining Plan of Action and Milestones (POA&M) documentation
Experience with reviewing and tracking security exceptions documentation
Knowledge of RMF, NIST SP 800-53, STIGs, IAVMs, and DoD cybersecurity compliance processes
Ability to analyze scan results, assess system risks, and develop mitigation strategies in coordination with system owners, coordinate and escalate vulnerability remediation efforts with technical and functional teams, and provide RMF and audit support
TS/SCI clearance
Bachelor’s degree in Cybersecurity, Information Technology, or Computer Science
DoD 8140 baseline Level II Certification, such as Security+, CySA+, or CISSP

Preferred

Experience supporting Air Force or Joint Cyber Operations units
Experience with enterprise patch management tools, such as SCCM, MECM, Tanium, or BigFix, and automated compliance reporting
Experience integrating vulnerability data into dashboards using Power BI, Elastic, or Splunk
Experience with PowerShell scripting
Experience supporting Agile cyber engineering teams
Knowledge of risk scoring methodologies (CVSS) and asset prioritization frameworks
Master’s degree in Cybersecurity, Computer Engineering, or Information Assurance
CASP+, CEH, or Certified Vulnerability Assessor (CVA)
SAFe Agile or ITIL Certification