Cyber Security Analyst III (Vulnerability Management)

**This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Cyber Security Analyst III (Vulnerability Management) based in United States.** This role is designed for an experienced cybersecurity professional who specializes in identifying, analyzing, and reducing security risks across complex enterprise environments. You will play a key role in strengthening vulnerability management processes, improving security visibility, and protecting critical systems. The position combines technical expertise, risk analysis, and collaboration with security, infrastructure, and business teams. You will work with industry-standard security tools to evaluate vulnerabilities, prioritize remediation efforts, and support compliance objectives. The role offers the opportunity to contribute to cybersecurity maturity initiatives within a mission-driven environment supporting federal information systems. You will also help improve processes, mentor junior team members, and influence secure technology practices across the organization. ### Accountabilities: The Cyber Security Analyst III (Vulnerability Management) will be responsible for managing vulnerability identification, analysis, reporting, and remediation support activities across enterprise environments. This role requires strong technical judgment, attention to detail, and the ability to translate security findings into actionable recommendations. - Perform vulnerability scanning across servers, endpoints, network devices, and cloud environments using approved tools such as Tenable, Nessus, Qualys, ACAS, or similar platforms. - Configure and optimize vulnerability scanning processes, including schedules, coverage, and tool effectiveness improvements. - Analyze vulnerability scan results, validate findings, identify false positives, and prioritize risks based on severity, exploitability, and asset criticality. - Provide risk-based recommendations to system owners, technical teams, and leadership to support timely remediation. - Track vulnerability remediation activities through POA&Ms, ticketing systems, and governance platforms. - Support risk assessments by evaluating security weaknesses, recommending compensating controls, and documenting findings. - Maintain vulnerability metrics, dashboards, trend analyses, and security reports for leadership review. - Support continuous monitoring activities, audits, and security assessment processes by validating data quality and reporting accuracy. - Evaluate patch management effectiveness and identify opportunities to improve remediation processes. - Collaborate with Security Operations Center (SOC) and Incident Response teams by providing vulnerability context related to threats and exploitation activity. - Support Risk Management Framework (RMF) activities by integrating vulnerability data into security assessments and authorization processes. - Monitor cybersecurity advisories, including CISA directives, CVE trends, and emerging threats, and communicate relevant impacts. - Maintain accurate asset visibility by reviewing Configuration Management Database (CMDB) records and validating scan coverage. - Support configuration change reviews by assessing potential vulnerability impacts and documenting findings. - Develop technical documentation, standard operating procedures, and process improvement recommendations. - Provide guidance and informal mentorship to junior cybersecurity analysts. ## Requirements: The ideal candidate brings strong vulnerability management expertise, cybersecurity knowledge, and the ability to operate independently in a technical environment while collaborating effectively with multiple stakeholders. - Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field with 5+ years of experience in vulnerability management, system security, security operations, or an equivalent combination of education and experience. - Prov…