Federal Vulnerability Management Analyst

Supporting U.S. Federal Government contracts, the full-time remote Federal Vulnerability Management Analyst will analyze scan results, prioritize vulnerabilities for remediation, and engage with engineering teams to track and report status and remediation timelines. Key responsibilities: Analyze and organize scan results to prioritize vulnerabilities based on risk requirements Engage with engineering teams to track remediation timelines and report status Support management of Planning of Actions and Milestones (POAMs) and monthly Continuous Monitoring (ConMon) Required qualifications: Working knowledge of scan tools such as Qualys, Tenable, and Twistlock Experience managing POAMs for FedRAMP authorized environments Understanding of FedRAMP, NIST 800-53 controls, IL4/5, and DoD SRG Proficiency in Python for scripting and automation tasks Experience in cloud computing with major CSPs like AWS or Google