Vulnerability Management Administrator

Responsibilities & Qualifications

RESPONSIBILITIES

• Conduct vulnerability assessments and scans across servers, workstations, network devices, applications, and other enterprise assets using tools such as Tenable, Nessus, or similar platforms.
• Analyze vulnerability scan results and validate findings to identify legitimate security risks and eliminate false positives.
• Assess and prioritize vulnerabilities based on CVSS scores, severity, exploitability, asset criticality, and mission impact.
• Coordinate with system administrators, application owners, network teams, and other stakeholders to develop and execute vulnerability remediation plans.
• Track remediation activities and maintain accurate vulnerability records, remediation status, exceptions, and risk acceptance documentation.
• Support the development and maintenance of Plans of Action and Milestones (POA&Ms) for unresolved security vulnerabilities.
• Perform follow-up scans and validation testing to confirm that vulnerabilities have been successfully remediated.
• Monitor emerging vulnerabilities, CVEs, security advisories, and threat intelligence to identify vulnerabilities that may require expedited remediation.
• Support system and application teams in implementing security patches, configuration changes, and system hardening measures.
• Assess systems against applicable Security Technical Implementation Guides (STIGs), configuration baselines, and organizational security requirements.
• Generate recurring vulnerability management reports, dashboards, metrics, and briefings for technical and management stakeholders.
• Maintain vulnerability management documentation, procedures, workflows, and standard operating procedures.
• Support FISMA, RMF, NIST, and other applicable cybersecurity compliance and assessment activities.
• Assist with security assessments, audits, and authorization activities by providing vulnerability data, remediation evidence, and supporting documentation.
• Identify trends and recurring vulnerabilities and recommend improvements to vulnerability management and remediation processes.
• Collaborate with cybersecurity, infrastructure, network, cloud, and application teams to reduce organizational vulnerability exposure.
• Ensure vulnerability management activities are performed in accordance with established security policies, procedures, service-level agreements, and remediation timelines.

REQUIRED QUALIFICATIONS

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related technical field, or equivalent combination of education and experience.
• 3+ years of experience in cybersecurity, vulnerability management, systems administration, information security, or a related technical discipline.
• DoD 8570/8140-aligned cybersecurity certification, such as Security+, or the ability to obtain the required certification within the designated timeframe, if required by the contract.
• Demonstrated experience conducting and analyzing vulnerability scans using tools such as Tenable, Nessus, Qualys, or comparable vulnerability management platforms.
• Experience analyzing vulnerabilities using CVEs, CVSS scoring, severity ratings, exploitability, and asset criticality to support risk-based remediation.
• Experience coordinating vulnerability remediation activities with system administrators, application owners, network engineers, and cybersecurity personnel.
• Experience with security patching, system hardening, configuration management, and vulnerability remediation verification.
• Working knowledge of NIST cybersecurity standards and frameworks, including NIST SP 800-53 and the Risk Management Framework (RMF).
• Familiarity with Security Technical Implementation Guides (STIGs), security configuration baselines, POA&Ms, and federal cybersecurity compliance requirements.
• Ability to analyze technical security findings, identify remediation requirements, and communicate recommended corrective actions to both technical and non-technical stakeholders.
• Experience developing vulnerability reports, dashboards, metrics, and management briefings.
• Ability to manage multiple vulnerabilities, remediation activities, and competing priorities while meeting established remediation timelines.
• Ability to obtain and maintain the required government security clearance or suitability determination, as applicable to the position.

We are seeking a Vulnerability Management Administrator to join our team supporting a Department of Commerce (DOC) project in Washington, D.C.

Tek Synap is a…