Vulnerability Management Analyst

DMI (Digital Management, LLC)

. Provide daily oversight of the vulnerability management program .

Posted 10/14/2026full-timeCrownsville • Maryland • United StatesSeniorLead💰 $121,600 - $152,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in vulnerability management, including oversight of vulnerability scanning, project execution, and compliance with cyber defense policies. Proficient in analyzing scan results and providing remediation recommendations while maintaining knowledge of relevant security frameworks and tools.

Highest-signal resume keywords

NIST Risk Management Framework (RMF)Tenable Security Center/Nessus ScannersVulnerability ManagementGovernance, Risk, and Compliance (GRC)Security Management Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability AssessmentPatch ManagementConfiguration AuditingTechnical DocumentationTroubleshootingProject ManagementCyber Defense PoliciesAsset ManagementScan Job ConfigurationRemediation Strategies

Soft Skills

Excellent Communication SkillsTeam CollaborationAutonomous Work Ability

Tools & Technologies

Tenable OneWeb InspectDB ProtectServiceNow GRCRSA Archer

Certifications & Qualifications

CISSPCISMCISACRISC

Industry Keywords

CybersecurityVulnerability Management ProgramSecurity Operations Center (SOC)Continuous MonitoringCompliance Documents

Tech Stack

Tools & technologies

LinuxServiceNow

About the role

Key responsibilities & impact

Provide daily oversight of the vulnerability management program
Serve as liaison between Security Assessment and Security Operations Center (SOC) functions regarding vulnerability scanning
Plan, execute, monitor, control, and close vulnerability management projects and tasks
Configure and schedule patch and secure configuration audit scan jobs
Maintain scan job configurations, including asset lists, scan plugins, STIGs, CIS Benchmarks, and scan credentials
Troubleshoot failed scan jobs, including credential, asset list, and firewall issues
Analyze scan results and document technical and procedural vulnerability findings
Research resolution strategies and provide remediation/mitigation recommendations
Identify false positives and define validation criteria and required artifacts
Prepare and communicate regular and ad hoc vulnerability management reports
Maintain updated secure configuration audit files and scan plugins
Ensure vulnerability management services, scan completeness, integrations, and data updates operate as scheduled
Maintain knowledge of cyber defense policies, regulations, and compliance documents
Develop and implement operational and technical vulnerability management policies, processes, and procedures

Requirements

What you’ll need

At least five (12) years of experience with NIST Risk Management Framework (RMF) supporting technical assessment and continuous monitoring post-system Authority to Operate (ATO)
At least ten (10) years of hands-on experience in LAN Administration
At least five (5) years of hands-on experience with Tenable Security Center/Nessus Scanners
At least five (5) years of hands-on experience planning, executing, monitoring and controlling, and closing security assessment projects
Associate’s or bachelor’s degree from an accredited college or university in Computer Science, Information Systems, Engineering or related scientific or technical discipline
At least 1 security management industry certification such as CISSP, CISM, CISA, CRISC etc.
Experience with Tenable One, Security Center/Nessus Scanners, Tenable.io, Web Inspect, DB Protect
LAN administration experience with Windows OS and Linux OS
Experience with Governance, Risk, and Compliance (GRC) platforms such as RSA Archer, ServiceNow GRC, CSAM
Ability to work outside regular business hours, including on-call support after regular business hours or weekends
Must be a U.S. Citizen
Ability to perform vulnerability assessments of technical security controls, validate findings, research resolutions, and provide remediation/mitigation recommendations
Excellent written and oral communication and presentation skills
Ability to work autonomously and on a team
Relevant industry certification

Benefits

Comp & perks

Virtual health visits
Commuter perks
Pet insurance
Entertainment discounts
Annual performance reviews
Tuition assistance
Internal career growth opportunities
Generous 401(k) matches
Life and disability insurance
Financial wellness tools
Annual awards
Service anniversaries
Referral bonuses
Peer-to-peer shoutouts
Healthcare coverage
Wellness programs
Flu shots
Biometric screenings