Vulnerability Management Technician

Job Summary

The Vulnerability Management Technician provides technical support to end users while supporting the organization’s cybersecurity and vulnerability management program. This role is responsible for resolving hardware, software, network, and user account issues while assisting with vulnerability identification, assessment, remediation, reporting, and compliance activities. The ideal candidate possesses strong customer service skills, technical troubleshooting abilities, and a foundational understanding of cybersecurity principles and risk management.

• Provide Tier I and Tier II technical support for desktops, laptops, and peripheral devices
• Diagnose and resolve hardware, software, operating system, network connectivity, and application issues
• Respond to, manage, and track service requests through the organization's ticketing system
• Install, configure, maintain, and troubleshoot workstation hardware and software
• Create, modify, and disable user accounts in accordance with organizational policies, including management of user roles and access permissions across enterprise systems
• Support Microsoft Windows operating systems and Microsoft 365 applications
• Assist users with password resets, access requests, and software installation support
• Maintain inventory and accountability of assigned IT assets and equipment
• Demonstrate a strong understanding of Windows operating systems, networking concepts, and web-based applications in troubleshooting activities
• Conduct and support routine vulnerability scans using approved cybersecurity tools
• Utilize vulnerability management tools and assist with scripting and automation to improve analysis, reporting, and remediation workflows
• Analyze vulnerability scan results and prioritize remediation based on severity and risk
• Coordinate remediation activities with system administrators, network administrators, and system owners
• Monitor patch compliance and support vulnerability mitigation activities
• Validate that patches and fixes have been successfully implemented through verification and rescanning
• Track vulnerability metrics and maintain remediation status reports
• Assist with implementation of cybersecurity controls and security best practices
• Support compliance efforts related to organizational, customer, and regulatory cybersecurity requirements
• Assist in cybersecurity audits, inspections, and assessments
• Document vulnerability findings, remediation actions, and technical troubleshooting details
• Create remediation reports and maintain cybersecurity compliance documentation
• Maintain an active event log reflecting the current security state of systems and environments
• Ensure accurate and timely reporting of vulnerability status and remediation progress
• Escalate complex technical or security issues to appropriate support or cybersecurity teams
• Apply strong analytical, organizational, and problem-solving skills to identify root causes and implement corrective actions
• Participate in incident response and cybersecurity investigations as required
• Support cybersecurity awareness and end-user training initiatives
• Maintain compliance with all cybersecurity, information assurance, and operational security requirements
• Participate in after‑hours support and maintenance activities when required
• Support administration, configuration, troubleshooting, and accountability of DoD encryption devices and associated cryptographic equipment
• Enforce approved security configurations and ensure systems remain compliant with Security Technical Implementation Guides (STIGs), cybersecurity policies, and security baselines
• Assist with implementation, validation, and remediation of STIG findings from audits, inspections, and vulnerability assessments
• Perform other job‑related duties, as required

• Prior military experience in Cyber Defense Operations AFSC (1D7X1) or DoD cybersecurity support experience highly desirable
• Experience with vulnerability scanning tools such as Tenable, Nessus, Qualys, or Rapid7
• Knowledge of cybersecurity frameworks such as NIST RMF, NIST CSF, or CIS Controls
• Experience supporting enterprise, government, or defense environments
• Familiarity with endpoint…