Vulnerability Management Analyst

Responsibilities

• Perform vulnerability assessments and analysis across NIH information systems and infrastructure
• Prioritize threats using exploitability, threat intelligence, and CISA KEV
• Develop vulnerability dashboards, remediation metrics, and executive reporting
• Review and analyze vulnerability scan results from enterprise security tools
• Coordinate with technical teams to assess remediation requirements and timelines
• Manage the full lifecycle of vulnerability identification, remediation, and closure
• Support continuous monitoring and RMF/A&A activities
• Assist with the management and tracking of Plans of Action and Milestones (POA&Ms)

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, IT, or Engineering
• Minimum 5 years of experience in cybersecurity or vulnerability management in Federal environments
• Experience with POA&M development and remediation tracking
• Familiarity with NIST RMF (SP 800-37), NIST SP 800-53 Rev. 5, and FISMA
• Ability to obtain and maintain an NIH Public Trust

Preferred Qualifications

• Certifications such as Security+, CEH, CISSP, GVA, GISF, GSEC, CAP, CISM, or CRISC
• Experience supporting NIH, HHS, or other Federal civilian agencies
• Knowledge of cloud security, FedRAMP, and Zero Trust principles
• Experience with continuous diagnostics and mitigation (CDM) initiatives

Benefits

• Comprehensive medical, dental, and vision coverage
• Flexible Spending Account and Health Savings Account options
• Retirement 401(k) with employer match
• Open leave policy and paid holidays
• Tuition reimbursement and employee assistance program

About the Company

Owned by the Native Village of Eyak (NVE), the Copper River Family of Companies delivers solutions to support the diverse missions of our clients. We are a proud participant in the SBA 8(a) Business Development Program, working to facilitate economic advancement for the Tribe.