Job Listing Information

Vulnerability Management Analyst
  • 06-Oct-2026 to 20-Oct-2026 (UTC)
  • Richmond, VA, USA
  • Full Time
  • Long Term Contract Length
  • 40 Weekly Hours

ABOUT THE ROLE:

- The State Corporation Commission (SCC) is seeking a Risk and Vulnerability Analyst to support vulnerability assessment and risk analysis activities at the SCC.

- This role is responsible for conducting vulnerability scanning and analysis, supporting remediation efforts, supporting scanning operations, and helping improve enterprise visibility into security weaknesses and cyber risks.

 

Responsibilities Include:

- Perform vulnerability assessments and assist security scanning across operating systems, databases, web applications, and enterprise infrastructure

- Analyze vulnerabilities and support development of remediation recommendations

- Support cloud compliance scans and assessment activities

- Help troubleshoot scanning issues and support maintenance of vulnerability scanning tools, consoles, and configurations

- Support automated and scheduled scanning activities, including scan planning, execution, and reporting

- Support ad hoc or emergency vulnerability scanning in support of incident investigation and response activities

- Create and maintain scan reports, data feeds, scan policies, repositories, and user access/roles for assessment tools

- Support API discovery and scanning, and integration of assessment data into third-party tools

- Coordinate with SCC Security Operations team to support tool operations, testing, and vulnerability management activities.

 

Fill the skill matrix below:

Skill

Required/Desired

Amount

Candidate's No. of years of experience

Information Security-related experience

Required

5

 

Software Vulnerability Management related experience

Required

3

 

Experience troubleshooting vulnerability scan tools and scan configurations

Required

3

 

Experience with automation supporting vulnerability assessment operations

Required

3

 

Experience supporting Information System Vulnerability Management (ISVM) scans and compliance activities

Required

3

 

Experience with API discovery and security scanning

Required

3

 

Experience and proficiency with Microsoft, SharePoint and Power BI

Required

5

 

Proven analytical and problem-solving abilities

Required

5

 

Excellent verbal and written communication skills

Required

5

 

Ability to work independently with minimal direction and as a team

Required

5

 

Highly motivated and self-directed

Required

5