Vulnerability Scan Analyst

About the role

Runs and analyzes automated vulnerability scans across servers, workstations, web applications, and general devices, then validates, filters, and prioritizes results into actionable, management-ready findings.

Responsibilities

• Configure and run vulnerability scanning tools without causing system disruption or service degradation.
• Validate scan results, eliminate false positives, and prioritize critical/high/moderate findings.
• Produce both filtered curated reports and raw/unfiltered native scan output as required by the RFP.
• Document whether tools used are commercial, proprietary, or open source.

Requirements

• 3+ years of vulnerability management or scan analysis experience.
• Proficiency with enterprise vulnerability scanners (Tenable/Nessus, Qualys, Rapid7, or equivalent).
• Strong analytical skills for false-positive triage and risk prioritization.

Qualifications

• GVMA, CompTIA PenTest+, or Security+ certification (preferred).
• Experience coordinating scan timing with client IT teams to minimize operational impact (preferred).

Schedule

Fully remote; must remain within the continental United States.