{"id":2544738,"url":"https://alion.io/job/dmi-vulnerability-management-analyst","title":"Vulnerability Management Analyst","company":{"id":2743519,"name":"DMI","domain":"dminc.com","url":"https://alion.io/company/dminc","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":126000,"max_usd":250000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":376},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CIS Benchmarks","optional":false},{"name":"Linux","optional":false},{"name":"Nessus","optional":false},{"name":"ServiceNow","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-14T16:31:22Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-15T19:11:14Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"About DMI\nDMI is a leading provider of digital services and technology solutions, headquartered in Tysons Corner, VA. With a focus on end-to-end managed IT services, including managed mobility, cloud, cybersecurity, network operations, and application development, DMI supports public sector agencies and commercial enterprises around the globe. Recognized as a Top Workplace, DMI is committed to delivering secure, efficient, and cost-effective solutions that drive measurable results. Learn more at www.dminc.com\nAbout the Opportunity\nDMI, LLC is seeking a Vulnerability Management Analyst with project lead experience and hands-on engineering experience. The Sr. Vulnerability Assessment Analyst will be responsible for the planning, implementation, maintenance, and support of the vulnerability management program at for a State-Level Department of IT, Security Assessment Function.\nDuties and Responsibilities:\nDaily oversight of vulnerability management program\nServe as liaison between Security Assessment and Security Operation Center (SOC) functions on matters pertaining to vulnerability scanning for security assessment efforts\nPlan, execute, monitor and control, and successfully close vulnerability management projects/tasks\nConfigure and schedule patch and secure configurations audit scan jobs (vulnerability scans)\nMaintain configurations of patch and secure configurations scan jobs i.e., asset lists, scan plugins, STIGs audit files, CIS Benchmarks audit files, scan credentials\nTroubleshoot and resolve failed patch and secure configurations scan jobs i.e., missing credentials, asset list updates, firewall issues\nAnalyze patch and secure configurations audit scan results and identify and document technical and procedural vulnerability findings\nResearch resolution strategies/measures for identified vulnerability findings and provide remediation/mitigation recommendations\nIdentify false positive findings and determine and advise on the criteria for validating the findings i.e., required artifacts\nPrepare vulnerability management reports on the status of patch and secure configuration audit scans and associated remediation efforts\nCommunicate status vulnerability management efforts to include regular scheduled reports and as well as ad hoc reports\nEnsure the vulnerability management platform maintains updated versions of secure configurations scans audit files i.e., proprietary vendor audit files, STIGs audit files, CIS Benchmarks audit files\nEnsure that vulnerability management services are operating as expected i.e., completeness of the of each scope scan jobs, timely completion of scan jobs, up-to-date patch audit plugins\nEnsure proper functioning of integrations between the vulnerability management platform and other tools such as asset management and risk management platforms\nEnsure and data updates from vulnerability management platforms to asset management and risk management platform are running as scheduled\nMaintain knowledge of applicable cyber defense policies, regulations, and compliance documents specifically related to cyber defense auditing.\nDevelopment and implementation operational and technical vulnerability management policies\nDefining, developing, implementing, and processes and procedures for to support and maintain vulnerability management program\nQualifications\nEducation and Years of Experience:\nAt least five (12) years of experience with NIST Risk Management Framework (RMF) supporting technical assessment (vulnerability scans) of control implementations and continuous monitoring post-system Authority to Operate (ATO)\nAt least ten (10) years of hands-on experience in LAN Administration i.e., Hands-on administration of Windows OS and Linux OS, and hands-on basics administration of routers, switches, and firewalls.\nAt least five (5) years of hands-on experience with Tenable Security Center/ Nessus Scanners i.e., creating, maintaining, and running scan jobs and analyzing scan results\nAt least five (5) years of hands-on experience planning, executing, monitoring and controlling, and closing security assessment projects\nAssociates or bachelor’s degree from an accredited college or university with a major in Computer Science, Information Systems, Engineering or related scientific or technical discipline.\nAbility to work outside of regular business hours, the role may require on-call support after regular business hours or weekends.\nRequired Skills/Certifications:\nAt least 1 security management industry certifications such as CISSP, CISM, CISA, CRISC etc.\nSelf-starter, able to gather requirements, plan, execute system deployment efforts.\nAble to perform conduct vulnerability assessment of technical security controls, identify and validate findings, research resolutions, and provide remediation/mitigation recommendations.\nExperience with the vulnerability management tools such as Tenable One, Security Center/Nessus Scanners, Tenable.io, Web Inspect, DB Protect etc.\nLAN administration experience, particularly with Windows OS and Linux OS.\nExperience with the vulnerability management tools such as Tenable Security Center/Nessus Scanners, Web Inspect, DB Protect etc.\nExperience with Governance, Risk, and Compliance (GRC) platforms such as RSA Archer, ServiceNow GRC, CSAM\nCustomer-oriented with excellent issue follow-through and resolution abilities.\nExcellent written and oral communication, and presentation skills.\nAbility to effectively work both autonomously as well as on a team.\nOutstanding interpersonal skills, strong work ethic, and self-motivated.\nUtilize tools and analytical skills to plan and execute technical changes.\nRelevant industry certification.\nDesired Skills/Certifications:\nExperience with the vulnerability management tools such as Tenable One, Security Center/Nessus Scanners, Tenable.io, Web Inspect, DB Protect etc.\nExperience with ServiceNow Vulnerability Response and Governance, Risk, and Compliance (GRC) modules. \nExperience with Window, Linux, Database, and Web Apps system administration.\nExperience in project task technical analysis, planning, and estimation.\nExperience with technology capabilities market research, technical analysis/review, and recommendation.\nOther relevant industry certifications such as Security +, CAP, CEH etc.\nCitizenship Status Required: Must be a U.S. Citizen\nPhysical Requirements: None required for this position.\nLocation: Remote, US (Must live within a commutable distance to Crownsville, MD)\nMinimum Salary Rate\n$121,600Median Salary Rate\n$152,000Working at DMI\nDMI is a diverse, prosperous, and rewarding place to work. Our culture is shaped by five core values that guide how we work, grow, and succeed together:\nDo What’s Right - We lead with honesty and integrity.\nOwn the Outcome - We take responsibility and deliver.\nDeliver for Our Customers - We are relentless about delivering value.\nThink Bold, Act Smart - We innovate with purpose.\nWin Together - We collaborate and celebrate our success.\nThese values aren’t just ideals-they show up in how we support every part of your well-being:\nConvenience/Concierge - Virtual health visits, commuter perks, pet insurance, and entertainment discounts that make life easier.\nDevelopment - Annual performance reviews, tuition assistance, and internal career growth opportunities to help you thrive.\n Financial - Generous 401(k) matches, life and disability insurance, and financial wellness tools to support your future.\nRecognition - Annual awards, service anniversaries, referral bonuses, and peer-to-peer shoutouts that spotlight your achievements.\nWellness - Healthcare coverage, wellness programs, flu shots, and biometric screenings to support your health.\nDMI values employees for their talents and contributions, and we take pride in helping our customers achieve their goals. Because when we live our values, we all win together.\n***************** No Agencies Please *****************\nApplicants selected may be subject to a government security investigation and must meet eligibility requirements for access to classified information. US citizenship may be required for some positions.","description_format":"text","description_chars":8113,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Growth opportunities","Wellness"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Information Security","Vulnerability Management","Mobile App Development Services"],"lifecycle":[{"event":"open","at":"2026-10-14T16:31:22Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":37,"reasons":["conf:2","velocity","win:early"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/dmi-vulnerability-management-analyst","json_url":"https://alion.io/job/dmi-vulnerability-management-analyst.json","meta":{"generated_at":"2026-10-15T21:43:39Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":32932,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2743519},"rest":"https://alion.io/mcp/rest/get_company?id=2743519"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdmi-vulnerability-management-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdmi-vulnerability-management-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdmi-vulnerability-management-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dmi-vulnerability-management-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdmi-vulnerability-management-analyst"}]}