C

Chenega

Defense, intelligence, and federal staffing services

Vulnerability Management Analyst 2

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeRedstone Arsenal, AL, USANo salary listed

About the Job

Requirements

  • A Bachelor's degree in Cybersecurity, Information Technology, or Computer Science or a related field, plus at least 3 years of experience in vulnerability tracking and reporting and at least 2 years in IT or cybersecurity roles; alternatively, a Master's degree in those fields or a related field plus at least 1 year of experience in vulnerability tracking and reporting.
  • Security+ certification.
  • Active Top Secret clearance with SCI eligibility.
  • Successfully pass background and drug screening.
  • Foundational understanding of networking fundamentals, including TCP/IP and common ports and protocols, and core Windows and Linux operating system environments.
  • Basic understanding of DoD vulnerability management processes, including DoDI 8530.01, NIST SP 800-40, and CJCSM 6510.01B.
  • Familiarity with DoD vulnerability management concepts, including the IAVA/IAVM process, CVEs, and CVSS scoring.
  • Working knowledge of DoD vulnerability scanning and compliance management tools, including ACAS (Tenable SecurityCenter/Nessus), SCAP Compliance Checker (SCC), and eMASS.
  • Working proficiency in Microsoft Excel, including data sorting, filtering, and basic formulas, for metrics and status tracking.
  • Ability to meet minimum clearance requirements.
  • Ability to work nights, weekends, and holidays on occasion.
  • Ability to travel up to 10%.

Responsibilities

  • Assist in reviewing basic scan outputs, filtering known false positives against baseline configurations, and escalating anomalies according to established standard operating procedures.
  • Assist in scheduling and executing vulnerability scans using Nessus, Tenable, or other approved platforms.
  • Collect asset compliance data, missing patch reports, and endpoint scan diagnostics for senior analyst review.
  • Document daily scanning and tracking status in ticketing and tracking registers and support regular team status briefings.
  • Perform data entry and generate reports using Gabriel Nimbus, Foundry/Vantage, Excel, and other reporting tools.
  • Coordinate with stakeholders to support remediation activities and ensure timely resolution.
  • Contribute to audit responses and documentation efforts as directed by senior staff.
  • Stay current with emerging threats, vulnerabilities, and mitigation strategies.
  • Assist in ingesting operational taskings, including CTOs, OPORDs, FRAGOs, TASKORDs, and IAVMs, into central tracking registers.
  • Coordinate with system administrators and network engineering teams to gather evidence of remediation and mitigation implementation.
  • Cross-reference scheduled Authorized Service Interruptions and maintenance windows to schedule and deconflict active vulnerability scanning.
  • Support priority mitigation workflows and track emergency patching actions associated with critical Zero-Day/IAVA taskings.
  • Perform other duties as assigned.

Desired Qualifications

  • Additional cybersecurity certifications, such as CSSP Analyst/Infrastructure Support, CEH, GCIA, or GCIH.
  • Six to twelve months of prior IT helpdesk, system administration, or SOC experience.
  • Familiarity with DISA STIGs and SCAP compliance validation tools.
  • Familiarity with Industrial Control Systems, Operational Technology, or specialized monitoring tools such as Dragos.
  • Hands-on experience with DISA ACAS (Tenable SecurityCenter/Nessus), SCAP compliance validation tools (SCC), and eMASS package maintenance.
  • Exposure to DoD cybersecurity frameworks and RMF processes.
  • Experience supporting POA&M documentation and audit preparation.

About the Company

Chenega

Defense, intelligence, and federal staffing services

Chenega is a government services contractor that supplies staffing and support services for defense, intelligence, and federal civilian customers, plus commercial clients. It operates across the United States, its territories, and several countries, tapping wide opportunities in government contracting. Its offerings center on staffing and mission support through various contracts, delivering qualified personnel and services to meet client needs. Unlike many industry players, Chenega is rooted in an Alaska Native village corporation, which shapes its ownership and community-focused approach while competing in a broad national market. The company’s goal is to help government and commercial customers execute their missions by providing reliable, professional personnel and services under contract.

Company size
1,001-5,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Anchorage, AK
Founded
1974

Recently Posted Jobs

Explore more opportunities at Chenega

See more jobs