Risk and Vulnerability Analyst II (R-00140)

Job description

True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the **Best Places to Work** in 2023 in two categories (“Prosperous and Thriving” ($5MM–$50MM in gross revenue) and “Mid-Atlantic Region” (DC, DE, MD, NC, VA, WV)), and again in 2025 as a **Best Places to Work** honoree. In addition, True Zero earned coveted spots on the **Inc. 5000** list of fastest-growing companies in America in **2022, 2023, and 2025**, a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence. This candidate will execute vulnerability identification, scanning, analysis, and coordination to reduce system attack. Maintain disciplined vulnerability workflows from discovery through validation and closure. Additionally, will support compliance scanning and troubleshooting across environments, including cloud and on-site scanning while ensuring the reporting is timely, accurate, and usable by stakeholders. ### Job Responsibilities - Perform ad hoc and automated vulnerability scanning using accepted tools. - Conduct cloud compliance scans and on-site scanning as required. - Analyze findings, prioritize risk, and track remediation progress. - Troubleshoot scanning issues and improve scan reliability/coverage. - Produce vulnerability reports and support stakeholder coordination. - Maintain a customer-service posture for program office and engineering partners. ### Job Qualifications - Bachelor’s degree - 3 years security-related experience. - Experience with industry-accepted scanning tools and automated scanning approaches. - Experience with cloud compliance scans and on-site scanning; skilled at troubleshooting. - Must be highly organized and customer-service focused. - Experience with ISVM scanning and compliance tracking - Experience with API discovery and scanning - Must be eligible for Secret clearance