Vulnerability Assessment Analyst

Seneca Technologies is part of the Seneca Nation Group (SNG) portfolio of companies. SNG is Seneca Holdings' federal government contracting business that meets mission-critical needs of federal civilian, defense, and intelligence community customers. Our portfolio comprises multiple subsidiaries that participate in the Small Business Administration 8(a) program. To learn more about SNG, visit the website and follow us on Linked In.

Our team of talented individuals is what makes us successful. To support our team, we provide a balanced mix of benefits and programs. Your total rewards package includes competitive pay, benefits, and perks, flexible work-life balance, professional development opportunities, and performance and recognition programs. We offer a comprehensive benefits package that includes medical, dental, vision, life, and disability, voluntary benefit programs (critical illness, hospital, and accident), health savings and flexible spending accounts, and retirement 401K plan.

One of our fundamental principles is to offer competitive health and welfare benefits to our team members, providing coverage and care for you and your family. Full-time employees working at least 30 hours a week on a regular basis are eligible to participate in our benefits and paid leave programs. We pride ourselves on our collaborative work environment and culture, which embraces our mission of providing financial and non-financial benefits back to the members of the Seneca Nation.

The Vulnerability Assessment Analyst supports a Department of War (DOW) agency contractor environment cybersecurity operations mission by identifying, assessing, and tracking security vulnerabilities across on-premises and cloud-based environments. The analyst is responsible for conducting vulnerability scans, analyzing findings, recommending remediation actions, and supporting risk-based decision-making. This position works closely with system owners, cybersecurity teams, and stakeholders to improve the agency's security posture through continuous assessment, reporting, and remediation tracking activities.

• Conduct vulnerability scans and security assessments of information systems, applications, networks, and cloud environments.
• Analyze vulnerability assessment results and determine the potential impact to systems and mission operations.
• Develop and recommend remediation strategies to address identified vulnerabilities and security weaknesses.
• Track vulnerability remediation efforts and coordinate with system owners to ensure timely resolution of findings.
• Support continuous monitoring programs through recurring assessments and validation of corrective actions.
• Perform risk-based analysis to prioritize vulnerabilities based on severity, exploitability, and mission impact.
• Generate reports, metrics, dashboards, and status updates related to vulnerability management activities.
• Validate remediation efforts through rescanning and follow-up assessments.
• Support Risk Management Framework (RMF) activities by providing vulnerability assessment data and supporting authorization decisions.
• Collaborate with cybersecurity, engineering, cloud, and operations teams to improve system security and compliance.
• Assist with cybersecurity inspections, audits, compliance reviews, and security assessments.
• Maintain assessment documentation and support reporting requirements for leadership and stakeholders.

• Demonstrated experience performing vulnerability assessments, security scanning, and cybersecurity analysis.
• Experience analyzing security findings and recommending risk-based remediation actions.
• Working knowledge of Department of War (DOW) cybersecurity requirements and…