Job Description
ABOUT THE ROLE:
Client is seeking a Risk and Vulnerability Analyst to support vulnerability assessment and risk analysis activities at the Client This role is responsible for conducting vulnerability scanning and analysis, supporting remediation efforts, supporting scanning operations, and helping improve enterprise visibility into security weaknesses and cyber risks.
Responsibilities Include:
Client is seeking a Risk and Vulnerability Analyst to support vulnerability assessment and risk analysis activities at the Client This role is responsible for conducting vulnerability scanning and analysis, supporting remediation efforts, supporting scanning operations, and helping improve enterprise visibility into security weaknesses and cyber risks.
Responsibilities Include:
- Perform vulnerability assessments and assist security scanning across operating systems, databases, web applications, and enterprise infrastructure
- Analyze vulnerabilities and support development of remediation recommendations
- Support cloud compliance scans and assessment activities
- Help troubleshoot scanning issues and support maintenance of vulnerability scanning tools, consoles, and configurations
- Support automated and scheduled scanning activities, including scan planning, execution, and reporting
- Support ad hoc or emergency vulnerability scanning in support of incident investigation and response activities
- Create and maintain scan reports, data feeds, scan policies, repositories, and user access/roles for assessment tools
- Support API discovery and scanning, and integration of assessment data into third-party tools
- Coordinate with Client Security Operations team to support tool operations, testing, and vulnerability management activities
| Skill | Required | Required Experience | Candidate Experience | Last Used |
| Information Security-related experience | Required | 5 | Years | |
| Software Vulnerability Management related experience | Required | 3 | Years | |
| Experience troubleshooting vulnerability scan tools and scan configurations | Required | 3 | Years | |
| Experience with automation supporting vulnerability assessment operations | Required | 3 | Years | |
| Experience supporting Information System Vulnerability Management (ISVM) scans and compliance activities | Required | 3 | Years | |
| Experience with API discovery and security scanning | Required | 3 | Years | |
| Experience and proficiency with Microsoft, SharePoint and Power BI | Required | 5 | Years | |
| Proven analytical and problem-solving abilities | Required | 5 | Years | |
| Excellent verbal and written communication skills | Required | 5 | Years | |
| Ability to work independently with minimal direction and as a team | Required | 5 | Years | |
| Highly motivated and self-directed | Required | 5 | Years |
| Questions | Questions | Answers |
| Question 1 | Commonwealth of Virginia security policies prohibit the use of offshore IT contractors. Do you attest to the fact that your candidate will physically reside within the US for the duration of the assignment? | |
| Question 2 | What is your candidate's email address? | |
| Question 3 | In what city and state does your candidate CURRENTLY reside? | |
| Question 4 | Experience supporting Information System Vulnerability Management (ISVM) scans and compliance activities is REQUIRED. It would be extremely helpful if you would HIGHLIGHT this on your candidate's resume in order for us to quickly find and confirm the level of their experience. | |
| Question 5 | Software Vulnerability Management related experience is REQUIRED for this role. Pls HIGHLIGHT any related experience on your candidates resume that supports this experience. | |
| Question 6 | Role requires 2-3 days ON SITE each week for this reason local Richmond candidates will be considered first. If selected - does your contractor agree to this ON SITE arrangement? |
Numbers & Facts
| Location | Richmond, VA |
| Industry | Computer/IT Services |
| Company Size | 100 to 499 employees |
| Year Founded | 1997 |
| Website | https://www.tscti.com/careers-0 |
About Company
22nd Century Technologies, Inc., is one of the fastest growing IT Service Integrator and Workforce Solution companies in the United States. Founded in 1997, 22nd Century Technologies is a Certified National Minority Business Enterprise with 6,000+ people including 600+ Cyber SMEs nationwide supporting our customers in all 50 states, Canada, and Mexico. With HQs in Somerset, NJ and Mclean, VA, 22nd Century has 14 offices throughout the United States. As part of our unrelenting focus on quality and compliance, 22nd Century Technologies’ delivery is based on Certified Matured Processes including CMMI L3 Dev & SVC, ISO 20000, ISO 27001, and ISO 9001 quality processes. With a strong focus on the public sector, 22nd Century currently holds government contracts with 14 out of 15 Federal Executive agencies including DoD, 37 other Federal agencies, 50 States, 115+ Local agencies, and 37 School Districts. In the last three years, we have expanded our services to Fortune 500 and other commercial clients and currently support 80+ commercial clients.
Recognized among “Best Company to Work For” by Forbes, 22nd Century Technologies, Inc., consistently exceeds our clients’ expectations by focusing on their absolute satisfaction with jobs while keeping our employees motivated.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.
Skills
Level up your application
Professional resume templates
Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.
Free resume templatesFree resume builder
Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.
Free resume builder