Security Vulnerability Management Analyst
About the job
- At least 3 years of relevant experience, including familiarity with host-based scanning and web application scanning.
- At least 3 years of knowledge and understanding of cybersecurity.
- At least 1 year of Splunk experience.
- Hands-on experience in large, dynamic enterprise information technology environments with 500 or more servers.
- Knowledge of hardware platforms.
- A Secret clearance is required.
- Offer cybersecurity-oriented strategic advisory and assistance services.
- Help improve the quality and integrity of federal security programs.
- Analyze security architecture and offer improvement ideas.
- Engage stakeholders to strengthen their security capabilities.
- Measure and demonstrate software compliance with internal and external regulations.
- Build custom Splunk scripts and applications.
- Collaborate with cross-functional teams to develop comprehensive infrastructure solutions.
- Design custom Splunk searches, programming, and reporting to meet client needs.
- Execute proof-of-concept documents.
- Work with UNIX, Linux, and Windows server administration teams to diagnose and resolve configuration issues.
- Perform vulnerability scans against client networks and applications using Tenable Nessus, SecurityCenter, Acunetix, Arachni, and AppDetective Pro.
- Evaluate vulnerability-scan findings to identify false positives and recommend mitigation procedures.
- Advise and assist in product development of enterprise cybersecurity applications.
- Experience with Splunk, SecurityCenter, Nessus, Acunetix, Arachni, and AppDetective Pro.
- Top Secret/SCI clearance.
About the company
Qmulos provides cybersecurity and IT compliance apps built on Splunk to help enterprises improve security and compliance. The products use Splunk’s data platform to automate activities such as compliance auditing, cyber defense, insider threat programs, and RMF-based security and compliance processes for large organizations, including federal agencies and critical infrastructure providers. The company differentiates itself by tackling complex, enterprise-scale challenges with a data-driven approach tied to Splunk, its federal-focused client base, and its status as a Veteran Owned SDVOSB. The goal is to help customers strengthen their security posture and meet regulatory requirements by turning data into automated, RMF-aligned security and compliance initiatives.
Company Size
51-200
Company Stage
N/A
Total Funding
N/A
Headquarters
Arlington, Virginia
Founded
2012
Get referred to Qmulos
See people who can refer or advise you
Simplify's Take
What believers are saying
- April 9, 2025 Q-BA² launch expands into insider-threat detection and audit automation.
- April 30, 2024 CMMC Level 3 and Azure support broadens addressable regulated markets.
- Qmulos keeps shipping updates, signaling active engineering despite vendor consolidation pressures.
What critics are saying
- PSG-backed Qmulos faces crowded rivals like ServiceNow, Rapid7, and Axonius.
- Government compliance budgets slow sales cycles, delaying revenue conversion after April 2025 launches.
- If Splunk or public-cloud partners displace Qmulos, the platform loses its core wedge.
What makes Qmulos unique
- Q-Compliance automates continuous evidence collection for NIST, CMMC, FedRAMP, and SOC 2.
- Q-BA² adds AI-driven insider-threat analytics atop Qmulos's existing compliance platform.
- Deep Splunk integration and OSCAL interoperability reduce deployment friction for regulated customers.
Help us improve and share your feedback! Did you find this helpful?
Company News
ARLINGTON, Va., April 9, 2025 - Qmulos, a compliance, security and risk management automation provider, today announced a user behavior analytics (UBA) and audit solution, Q-Behavior Analytics and Audit (Q-BA[2)], designed for government agencies and commercial enterprises.
Qmulos Named 2024 Regional Partner of the Year Winner for Outstanding Public Sector PartnershipARLINGTON, Va., June 12, 2024 /PRNewswire/ -- Qmulos, a next-generation compliance, security and risk management automation provider, announced today it has received the 2024 Regional Partner of the Year award for exceptional performance and commitment to their Splunk partnership. The 2024 Regional Partner of the Year Award celebrates a Public Sector partner that has showcased innovation and resilience using Splunk products and technologies, delivering exceptional services and offering insightful consultative guidance to address complex customer challenges. For more information on Splunk's partnerships, visit the Splunk website."We are honored to be recognized as the 2024 Regional Partner of the Year by Splunk," said Matt Coose, founder and CEO of Qmulos. "Our partnership with Splunk allows us to leverage Splunk's powerful big data capabilities to help our clients navigate complex compliance frameworks and controls, while effectively combating the ongoing threat of cyber attacks. Splunk's exceptional data ingestion capabilities enable Qmulos to support organizations in meeting rigorous audit and compliance standards, regardless of the scale of their datasets or the complexity of their environments.""Congratulations to Qmulos for being named the 2024 Regional Partner of the Year," said Gretchen O'Hara, Vice President, Worldwide Partners and Alliances, Splunk. "The 2024 Splunk Partner Awards recognize partners like Qmulos for outstanding performance and innovation and celebrate the joint success that helps customers build resilience and solve day-to-day challenges
Cutting-edge compliance, security, and risk management automation provider updates its platform with new features to help security teams comply with the latest compliance industry standards and help them make evidence-based decisions confidently through real-time insightsARLINGTON, Va., April 30, 2024 /PRNewswire/ -- Qmulos, a next-generation compliance, security, and risk management automation provider, today announced significant updates to its flagship compliance automation platform, Q-Compliance. Q-Compliance V4.5.0, now generally available, features added support for the recently released CMMC level 3 compliance requirements ; NERC CIP support for North American electric utility companies; and enhanced data migration capabilities to help security and risk management teams migrate NIST 800-53 rev. 4 objectives and results to rev. 5 objectives.Qmulos has also created support for technical add-ons OpenShift® and Microsoft Azure, enabling security and risk management teams to run and manage containerized applications."Cybersecurity standards and controls are increasing in pace and complexity, and the stakes are high for the compliance, security, and risk management teams of companies that don't comply," said Matt Coose, founder and CEO of Qmulos. "With our latest updates to Q-Compliance, we have made significant enhancements to the platform to ease the headaches of implementing and maintaining these standards, which requires a deep understanding of various systems, networks, and software and alignment with legal language."Later in Q2 2024, Qmulos will add support for NIST's OSCAL interoperability standard as recommended by FEDRAMP for sending and receiving artifacts, and will also introduce additional scorecards to help organizations assess the maturity of their Zero Trust implementation. These scorecards will encompass various criteria, including the mapping of CISA's memorandum to CSF, alignment with NIST 1800.35E ZTA, and a third based on OMB M-22-09
Qmulos has also created support for technical add-ons OpenShift(R) and Microsoft Azure, enabling security and risk management teams to run and manage containerized applications.
Qmulos launches Q-Compliance Core for businesses in need of a modern compliance approach.