Sr. Vulnerability Assessment Analyst I (6397) at Metrostarsystems

Metrostarsystems

Washington, DC·10h ago

SeniorFull-time

Salary Range

$66,300 - $89,700 /year

Estimated

This salary is estimated based on similar roles. The actual salary may vary.

About the Role

We are seeking a Vulnerability Assessment Analyst to join our Cybersecurity Team at MetroStar. This role involves identifying and assessing security weaknesses across mission-critical systems and networks for federal government environments, with the goal of strengthening security resilience and driving secure operations.

Key Responsibilities

→Conduct automated vulnerability scans and manual technical assessments across systems and networks
→Analyze scan results to identify deviations from approved configuration baselines, STIGs, and security requirements
→Assess the effectiveness of defense-in-depth architecture against known vulnerabilities
→Prioritize vulnerabilities based on mission impact, exploitability, and operational risk
→Produce clear, actionable technical reports, metrics, and briefings for leadership
→Coordinate remediation activities with engineering, operations, and cybersecurity teams
→Track vulnerability findings and remediation actions through closure
→Support audits, inspections, and continuous monitoring activities

Requirements

✓Active Top Secret security clearance with SCI eligibility
✓5+ years of experience conducting vulnerability assessments in enterprise or enclave environments
✓Bachelor’s degree in Computer Science, Cybersecurity, or related field preferred
✓DoD 8140 certification aligned to the 541 Vulnerability Assessment Analyst work role
✓Experience assessing system and network configurations against approved baselines
✓Hands-on experience analyzing vulnerability scan results and producing remediation recommendations
✓Ability to evaluate defense-in-depth architectures against vulnerabilities
✓Experience documenting, reporting, and briefing vulnerability findings
✓Experience with Nessus or Tenable and Splunk Enterprise
✓Required technical certifications: Security+ and PenTest+ or CEH
✓Ability to contribute immediately in a mission-critical environment