Vulnerability Management Analyst

Responsibilities

• Support vulnerability scanning, analysis, prioritization, remediation coordination, reporting, KEV tracking, and risk-based mitigation across the NIH/OD-OIT managed environment.
• Operate or support host-based, network-based, application, and database vulnerability scanning activities.
• Analyze scan results, identify high-risk vulnerabilities, and develop mitigation guidance.
• Carefully coordinate remediation tracking with system owners, technical POCs, program areas, and security stakeholders.
• Support vulnerability management reporting, ad hoc reports, remediation activity summaries, and risk-based prioritization.
• Track critical vulnerabilities, KEVs, configuration errors, missing assets, unauthorized software/hardware, and remediation timelines.
• Maintain monitoring of authoritative government and private-sector vulnerability intelligence sources.
• Support integration of vulnerability management with CDM, RMF, risk registers, POA&Ms, and compliance reporting.

Requirements

• Bachelor’s Degree or equivalent.
• Experience performing vulnerability analysis, scan review, remediation tracking, technical risk assessment, or security assessments.
• Familiarity with vulnerability scanners, CDM concepts, KEV catalog tracking, CISA BODs, CVSS, configuration findings, and remediation workflows.
• Ability to translate technical findings into clear risk statements and practical mitigation recommendations.
• Strong coordination and reporting skills.

Preferred Qualifications

• Security+, CySA+, Tenable/Qualys/Rapid7 certification, CISSP, CISA, or equivalent.

Location/Work Arrangement

• Schedule is full-time, Monday – Friday 40-hour week, 4/10’s, or 9/80’s and may require on call or overnight shifts depending on contract needs.
• This position may be fully onsite or hybrid/remote depending on the needs of the specific contract.

Benefits

• BGS offers a competitive total compensation package to eligible employees.
• Benefits include Health, Dental, Vision, Life Insurance, Paid Vacation, 401K, Long and Short-Term Disability.

Pay

• Starting compensation for this role typical salary ranges between $131,316 – $154,489 annually is commensurate with experience relative to the position and may vary based on candidate geographical location.

Schedule

• The schedule is full-time, Monday – Friday 40-hour week, 4/10’s, or 9/80’s and may require on call or overnight shifts depending on contract needs.

Benefits

• BGS offers a competitive total compensation package to eligible employees.
• Benefits include Health, Dental, Vision, Life Insurance, Paid Vacation, 401K, Long and Short-Term Disability.

EEO

• EEO BGS is an Equal Opportunity/Affirmative Action employer. All qualified applicants are encouraged to apply and will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or protected veteran status.

Exclusive Agreement Disclaimer

• BGS has standing contracts with federal agencies throughout the United States. We require an affirmative exclusive agreement to represent all candidates to our clients. By submitting this application, you are consenting to allow BGS to represent you as a candidate for the role in which you are applying.