Vulnerability Management Analyst

TQI Solutions seeks proactive, visionary thought leaders to drive impactful solutions for clients. We value our team, offering work-life balance, excellent benefits, and career growth. Join us and immerse yourself in a rewarding experience like no other. TQI Solutions is actively seeking a collaborative and skilled Vulnerability Management Specialist to join our dedicated team supporting the Pearl Harbor Naval Shipyard & Intermediate Maintenance Facility (PHNSY & IMF) at Joint Base Pearl Harbor-Hickam in Honolulu, HI. This role will provide critical cybersecurity support within the Network Operations Security Center (NOSC), focusing on vulnerability identification, assessment, tracking, reporting, and remediation coordination across Navy IT systems and networks. The ideal candidate will possess strong technical and analytical skills, with experience utilizing cybersecurity tools such as ACAS and VRAM to strengthen cybersecurity readiness, reduce operational risk, and maintain compliance with Department of Defense (DoD) and Department of the Navy (DON) requirements. The estimated salary range for this role is $60, 000 - $90, 000 per year. Final compensation is dependent upon the candidate's skills, qualifications, contract-specific guidelines, and geographic location. TQI is committed to pay equity and compliance with Hawaii pay transparency requirements. We do not request or consider prior salary history when making employment offers. Responsibilities: • Conduct routine vulnerability assessments using Assured Compliance Assessment Solution (ACAS), including Tenable Nessus and Tenable Security Center. • Monitor and analyze vulnerability scan results to identify security weaknesses, configuration deficiencies, and potential cybersecurity risks. • Evaluate vulnerability findings to determine severity, affected assets, operational impact, and remediation priorities. • Maintain vulnerability scanning schedules and coordinate assessments with system and network administrators to minimize operational disruptions. • Investigate scan discrepancies, incomplete results, and potential false positives to ensure accurate vulnerability reporting. • Utilize Vulnerability Remediation Asset Manager (VRAM) and other authorized DoD systems to track, document, and report identified vulnerabilities. • Coordinate with system administrators, network administrators, and cybersecurity personnel to facilitate timely remediation and corrective actions. • Monitor remediation progress, validate corrective actions through follow-up assessments, and document closure of vulnerability findings. • Track vulnerabilities associated with Information Assurance Vulnerability Alerts (IAVAs), Information Assurance Vulnerability Bulletins (IAVBs), and other applicable cybersecurity directives. • Identify overdue vulnerabilities, recurring deficiencies, and remediation challenges requiring escalation. • Support the development and maintenance of Plans of Action and Milestones (POA& Ms), as applicable. • Ensure vulnerability management activities align with applicable DoD, DON, Defense Information Systems Agency (DISA), and Navy cybersecurity policies and standards. • Assist with implementation and validation of Security Technical Implementation Guides (STIGs) and security configuration baselines. • Support cybersecurity assessments, inspections, audits, Risk Management Framework (RMF) activities, and authorization documentation requirements. • Develop and maintain vulnerability status reports, remediation metrics, compliance documentation, and tracking records. • Communicate vulnerability trends, outstanding findings, remediation progress, and cybersecurity risks to technical teams and leadership. • Participate in NOSC operational meetings and collaborate with technical teams to improve vulnerability management processes. • Assist in developing and maintaining standard operating procedures (SOPs) for vulnerability scanning, tracking, reporting, and remediation. • Support cybersecurity incident response activities and other NOSC operational requirements as assigned. This is a full-time, on-site position located at Joint Base Pearl Harbor-Hickam in Honolulu, HI. Qualifications: • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related technical field, or an equivalent combination of education, certifications, and relevant experience. • Three or more years of experience in cybersecurity, vulnerability management, information assurance, network administration, or related IT security functions. • Relevant cybersecurity certifications such as CompTIA Security+, CySA+, or other certifications aligned with applicable DoD 8140 requirements. • Experience utilizing ACAS, Tenable Nessus, Tenable Security Center, or comparable vulnerability scanning technologies. • Familiarity with VRAM or similar vulnerability tracking and remediation management systems. • Strong understanding of vulnerability assessment methodologies, patch management, cybersecurity remediation, and risk management processes. • Knowledge of DoD cybersecurity requirements, DISA STIGs, and applicable Navy cybersecurity policies and standards. • Familiarity with Windows and/or Linux operating systems, networking fundamentals, and enterprise IT environments. • Experience supporting cybersecurity compliance activities, vulnerability reporting, and remediation tracking. • Ability to analyze technical findings, document results, and communicate remediation requirements to technical stakeholders. • Strong organizational, analytical, troubleshooting, and written and verbal communication skills. • Ability to work independently and collaboratively within a multidisciplinary IT operations environment. • Ability to obtain and maintain required DoD cybersecurity workforce qualifications applicable to the assigned position. The incumbent of this position will be subject to a background investigation and will be required to maintain a Government-granted security clearance. TQI Solutions, Inc. is a Service-Disabled Veteran-Owned Small Business with staff located in VA, WA, DC, GU, HI, and CA. We provide Mission and IT Support Services to a wide range of DoD clients. At TQI Solutions, our aim is to surpass customer expectations through results-oriented services and solutions that ensure mission success. We take pride in fully embracing our clients' missions as our own and consistently delivering world-class technical solutions. Our team comprises dedicated problem solvers who prioritize building lasting and mutually trusting relationships with our customers. TQI Solutions is an equal opportunity employer and is committed to fostering a diverse and inclusive workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, pregnancy, national origin, disability, or veteran status.