Amazon
Vulnerability Management Analyst, US ADC Security
$102K–$178K
Herndon, VA · Full-time · Posted Oct 27, 2026
- Experience
- 3+ years of vulnerability management, security operations, or related experience.
About the job
Manages vulnerability identification, prioritization, tracking, and remediation for information systems supporting a U.S. Government program, helping maintain security documentation and a valid ATO.
What you'll do
- Maintain the vulnerability management plan, asset inventory, patching cadence, and related SSP documentation.
- Conduct vulnerability scans, prioritize findings, and drive IAVA remediation through verified closure.
- Report remediation status, support audits and government inquiries, and improve scanning and reporting processes.
What they ask for
- Working knowledge of vulnerability scanning tools and patch management practices.
- Experience producing and maintaining asset inventories and vulnerability/remediation reports.
- Working knowledge of NIST 800-53, RMF, and SSP development related to vulnerability management.
- Current, active U.S. Government TS/SCI security clearance with polygraph; U.S. citizenship.
Nice to have
- Experience resolving IAVAs and familiarity with U.S. Government/IC authorization and continuous monitoring requirements.
- Scanning/reporting automation experience or a security certification such as CISSP, CySA+, or Security+.
Pay
USD 102,000.00 - 178,400.00 annually (base salary)
Tools
NIST 800-53, RMF, SSP, IAVAs, ATO
Model-written summary · the original posting is authoritative