Job description

Job ID: VA-813431 (910191011) Hybrid/Local Risk/Vulnerability Management Analyst (15+) with ISVM, API discovery/Security, SharePoint, Power BI experience Location: Richmond, VA (SCC) Duration: 12 Months ON SITE: 2-3 days/week. Parking is NOT provided for contractors. Skills: Information Security-related experience Required 5 Years Software Vulnerability Management related experience Required 3 Years Experience troubleshooting vulnerability scan tools and scan configurations Required 3 Years Experience with automation supporting vulnerability assessment operations Required 3 Years Experience supporting Information System Vulnerability Management (ISVM) scans and compliance activities Required 3 Years Experience with API discovery and security scanning Required 3 Years Experience and proficiency with Microsoft, SharePoint and Power BI Required 5 Years Proven analytical and problem-solving abilities Required 5 Years Excellent verbal and written communication skills Required 5 Years Ability to work independently with minimal direction and as a team Required 5 Years Highly motivated and self-directed Required 5 Years Description: ABOUT THE ROLE: The State Corporation Commission (SCC) is seeking a Risk and Vulnerability Analyst to support vulnerability assessment and risk analysis activities at the SCC. This role is responsible for conducting vulnerability scanning and analysis, supporting remediation efforts, supporting scanning operations, and helping improve enterprise visibility into security weaknesses and cyber risks. Responsibilities Include: Perform vulnerability assessments and assist security scanning across operating systems, databases, web applications, and enterprise infrastructure Analyze vulnerabilities and support development of remediation recommendations Support cloud compliance scans and assessment activities Help troubleshoot scanning issues and support maintenance of vulnerability scanning tools, consoles, and configurations Support automated and scheduled scanning activities, including scan planning, execution, and reporting Support ad hoc or emergency vulnerability scanning in support of incident investigation and response activities Create and maintain scan reports, data feeds, scan policies, repositories, and user access/roles for assessment tools Support API discovery and scanning, and integration of assessment data into third-party tools Coordinate with SCC Security Operations team to support tool operations, testing, and vulnerability management activities VA-RTR-813431.docx VA-SM-813431.docx Hybrid/Local Risk/Vulnerability Management Analyst (15+) with ISVM, API discovery/Security, SharePoint, Power BI experience Share this: • Share on Facebook (Opens in new window) Facebook • Share on X (Opens in new window) X • Like this: Like Loading…

Requirements

Must-haves

Job ID: VA-813431 (910191011)
Hybrid/Local Risk/Vulnerability Management Analyst (15+) with ISVM, API discovery/Security, SharePoint, Power BI experience
Location: Richmond, VA (SCC)
Duration: 12 Months
ON SITE: 2-3 days/week. Parking is NOT provided for contractors.
Information Security-related experience Required 5 Years
Software Vulnerability Management related experience Required 3 Years
Experience troubleshooting vulnerability scan tools and scan configurations Required 3 Years
Experience with automation supporting vulnerability assessment operations Required 3 Years
Experience supporting Information System Vulnerability Management (ISVM) scans and compliance activities Required 3 Years
Experience with API discovery and security scanning Required 3 Years
Experience and proficiency with Microsoft, SharePoint and Power BI Required 5 Years
Proven analytical and problem-solving abilities Required 5 Years
Excellent verbal and written communication skills Required 5 Years
Ability to work independently with minimal direction and as a team Required 5 Years
Highly motivated and self-directed Required 5 Years
Perform vulnerability assessments and assist security scanning across operating systems, databases, web applications, and enterprise infrastructure
Analyze vulnerabilities and support development of remediation recommendations
Support cloud compliance scans and assessment activities
Help troubleshoot scanning issues and support maintenance of vulnerability scanning tools, consoles, and configurations
Support automated and scheduled scanning activities, including scan planning, execution, and reporting
Support ad hoc or emergency vulnerability scanning in support of incident investigation and response activities
Create and maintain scan reports, data feeds, scan policies, repositories, and user access/roles for assessment tools
Support API discovery and scanning, and integration of assessment data into third-party tools

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

api

Platform: careers-html
Effort: medium