{"id":2720000,"url":"https://alion.io/job/seneca-holdings-vulnerability-assessment-analyst","title":"Vulnerability Assessment Analyst","company":{"id":684887,"name":"Seneca Holdings","domain":"senecaholdings.com","url":"https://alion.io/company/senecaholdings","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":75,"open_postings":19,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":29,"computed_at":"2026-10-20T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":128000,"max_usd":225000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":100},"experience_years_min":9,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"Nessus","optional":false}],"status":"live","first_seen_at":"2026-10-16T14:19:10Z","employer_posted_date":"2026-10-16","last_verified_at":"2026-10-20T23:33:50Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"Seneca Technologies is part of the Seneca Nation Group (SNG) portfolio of companies. SNG is Seneca Holdings’ federal government contracting business that meets mission-critical needs of federal civilian, defense, and intelligence community customers. Our portfolio comprises multiple subsidiaries that participate in the Small Business Administration 8(a) program. To learn more about SNG, visit the website and follow us on LinkedIn.\nOur team of talented individuals is what makes us successful. To support our team, we provide a balanced mix of benefits and programs. Your total rewards package includes competitive pay, benefits, and perks, flexible work-life balance, professional development opportunities, and performance and recognition programs. We offer a comprehensive benefits package that includes medical, dental, vision, life, and disability, voluntary benefit programs (critical illness, hospital, and accident), health savings and flexible spending accounts, and retirement 401K plan. One of our fundamental principles is to offer competitive health and welfare benefits to our team members, providing coverage and care for you and your family. Full-time employees working at least 30 hours a week on a regular basis are eligible to participate in our benefits and paid leave programs. We pride ourselves on our collaborative work environment and culture, which embraces our mission of providing financial and non-financial benefits back to the members of the Seneca Nation.\nSeneca Technologies is hiring for a Vulnerability Assessment Analyst. The Vulnerability Assessment Analyst supports a Department of War (DOW) agency contractor environment cybersecurity operations mission by identifying, assessing, and tracking security vulnerabilities across on-premises and cloud-based environments. The analyst is responsible for conducting vulnerability scans, analyzing findings, recommending remediation actions, and supporting risk-based decision-making. This position works closely with system owners, cybersecurity teams, and stakeholders to improve the agency's security posture through continuous assessment, reporting, and remediation tracking activities.\nKey Responsibilities:\nConduct vulnerability scans and security assessments of information systems, applications, networks, and cloud environments.\nAnalyze vulnerability assessment results and determine the potential impact to systems and mission operations.\nDevelop and recommend remediation strategies to address identified vulnerabilities and security weaknesses.\nTrack vulnerability remediation efforts and coordinate with system owners to ensure timely resolution of findings.\nSupport continuous monitoring programs through recurring assessments and validation of corrective actions.\nPerform risk-based analysis to prioritize vulnerabilities based on severity, exploitability, and mission impact.\nGenerate reports, metrics, dashboards, and status updates related to vulnerability management activities.\nValidate remediation efforts through rescanning and follow-up assessments.\nSupport Risk Management Framework (RMF) activities by providing vulnerability assessment data and supporting authorization decisions.\nCollaborate with cybersecurity, engineering, cloud, and operations teams to improve system security and compliance.\nAssist with cybersecurity inspections, audits, compliance reviews, and security assessments.\nMaintain assessment documentation and support reporting requirements for leadership and stakeholders.\nRequired Qualifications:\nDemonstrated experience performing vulnerability assessments, security scanning, and cybersecurity analysis.\nExperience analyzing security findings and recommending risk-based remediation actions.\nWorking knowledge of Department of War (DOW) cybersecurity requirements and vulnerability management processes.\nUnderstanding of Risk Management Framework (RMF), security authorization, and continuous monitoring principles.\nExperience supporting remediation tracking and compliance reporting activities.\nStrong analytical, problem-solving, and communication skills.\nAbility to work independently and collaboratively within a mission-focused cybersecurity environment.\nS. citizenship and ability to obtain and maintain all required government security clearances, as applicable.\nOne or more of the following certifications:CompTIA Security+ CE\nCompTIA CySA+\nCertified Ethical Hacker (CEH)\nTenable Certification\nComparable vulnerability assessment or cybersecurity certification\n\nEducation & Experience\nPossess current Secret Clearance plus one of the following:\nBachelor's degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, or a related field and a minimum of five (5) years of experience in vulnerability management, cybersecurity assessments, RMF, or system security activities.\nOr minimum of nine (9) years of directly relevant cybersecurity, vulnerability assessment, or system security experience in lieu of a degree.\nTechnical Skills & Knowledge\nVulnerability Assessment & Management\nVulnerability Scanning and Analysis\nVulnerability Prioritization and Risk Assessment\nRemediation Planning and Tracking\nSecurity Configuration Assessment\nRisk-Based Vulnerability Management\nContinuous Monitoring and Validation\nSecurity Assessment Tools\nTenable Nessus\nTenable Security Center or Equivalent Platforms\nVulnerability Assessment and Compliance Tools\nSecurity Reporting and Dashboard Solutions\nCloud Security Tools & Platforms\nAWS Native Security Monitoring Tools\nMicrosoft Azure Security Monitoring Tools\nGoogle Cloud Platform (GCP) Security Monitoring Tools\nCloud Vulnerability Assessment and Configuration Review\nRisk Management & Compliance\nDOW Risk Management Framework (RMF)\nNIST Special Publication 800-37\nSecurity Authorization and Accreditation Processes\nContinuous Monitoring Programs\nSecurity Control Validation\nPlan of Action & Milestones (POA&M) Management\nCybersecurity Knowledge Areas\nNetwork Security Principles\nThreat and Vulnerability Analysis\nSecurity Compliance Requirements\nSecurity Reporting and Metrics\nRemediation Verification\nCyber Risk Analysis and Mitigation\nLocation: Mechanicsburg, PA. Remote work may be authorized. Employees working remotely must reside within commuting distance of an approved SIPRNet access location and be available to support classified work requirements as needed.\nClearance: Active Secret\nTravel: Some CONUS travel required\n\nEqual Opportunity Statement:\nSeneca Holdings provides equal employment opportunities to all employees and applicants without regard to race, color, religion, sex/gender, sexual orientation, national origin, age, disability, marital status, genetic information and/or predisposing genetic characteristics, victim of domestic violence status, veteran status, or other protected class status. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leave of absence, compensation and training. The Company also prohibits retaliation against any employee who exercises his or her rights under applicable anti-discrimination laws. Notwithstanding the foregoing, the Company does give hiring preference to Seneca or Native individuals. Veterans with expertise in these areas are highly encouraged to apply.","description_format":"text","description_chars":7349,"description_truncated":false,"requirements":{"experience_years_min":9,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["401k plan","Flexible schedule","Professional development","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Endpoint Security","Information Security","Vulnerability Management"],"lifecycle":[{"event":"open","at":"2026-10-16T14:39:32Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":3,"expected_fill_days":29,"reasons":["conf:2","stale_co","velocity","win:early"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/seneca-holdings-vulnerability-assessment-analyst","json_url":"https://alion.io/job/seneca-holdings-vulnerability-assessment-analyst.json","meta":{"generated_at":"2026-10-21T02:11:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3303,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":684887},"rest":"https://alion.io/mcp/rest/get_company?id=684887"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fseneca-holdings-vulnerability-assessment-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fseneca-holdings-vulnerability-assessment-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fseneca-holdings-vulnerability-assessment-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/seneca-holdings-vulnerability-assessment-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fseneca-holdings-vulnerability-assessment-analyst"}]}