Top 471 Security analyst Jobs in Herndon Va

VULNERABILITY MGMT ANALYST
Arete —Falls Church, VA
- $90,000 - $120,000 a year
- Full-time
- Mid-level
- Bachelor's degree
- Travel
- Paid parental leave
- Disability insurance
6d
Senior Security Analyst
Motion Recruitment —Herndon, VA
- Contract
- Windows
- Java
- Senior level
12d
Cyber Investigations Analyst - OTA / Active Top Secret
Peraton —Arlington, VA
- $80,000 - $128,000 a year
- Full-time
- Mid-level
- Analysis skills
- Bachelor's degree
- Health savings account
- Paid holidays
Security Compliance Analyst II
H4 Enterprises —Washington, DC
- $83 - $85 an hour
- Full-time
- Hybrid work
- Bachelor's degree
- In-person
- Senior level
- Health insurance
- Dental insurance
Quick Apply
13d
Cybersecurity Analyst – Security Standards & Baselines / Active Secret
Peraton —Arlington, VA
- $86,000 - $138,000 a year
- Hybrid work
- Customer service
- 5 years
- Windows
- Health savings account
- Paid holidays
Security & Compliance Analyst
Envision Consulting —Alexandria, VA
- $85,000 - $110,000 a year
- Full-time
- Hybrid work
- Mid-level
- 3 years
- Communication skills
- Health insurance
- Dental insurance
Quick Apply
Cybersecurity Analyst
Forman Technology Group —Arlington, VA
- $95,986.11 - $124,026.28 a year
- Full-time
- Computer science
- Computer Science
- Research
- Health insurance
- Dental insurance
Quick Apply
3d
Security Analyst I (Friday–Monday, 12am–11am CST)
Ntiva —McLean, VA
- $49,000 - $70,000 a year
- Full-time
- Remote
- English
- Analysis skills
- Travel
- Health savings account
- AD&D insurance
Quick Apply
SOC Analyst 2
Lateral Insights LLC —Great Falls, VA
- Mid-level
- Continuous improvement
- Scripting
Quick Apply
6d
Cybersecurity Analyst
Amentum —McLean, VA
- $140,000 - $160,000 a year
- Full-time
- Customer service
- 5 years
- Bachelor of Science
- Health savings account
- Health insurance
Quick Apply
3d
Mid-Level SOC Analyst - Hybrid
KeyLogic Systems —Alexandria, VA
- $80,000 a year
- Nights as needed
- Hybrid work
- Background check
- Computer Science
- Mid-level
- Health insurance
- 401(k) matching
Quick Apply
Journeyman Cybersecurity Analyst
Govcio LLC —Alexandria, VA
- $100,000 - $130,000 a year
- Full-time
- Hybrid work
- 6 years
- High school diploma or GED
- Senior level
Sr. Security Test & Evaluation Analyst
Horizontal Talent —Washington, DC
- $39 - $75 an hour
- Azure
- Writing skills
- AWS
- Health insurance
- Vision insurance
Digital Forensic Analyst
Crest Security Assurance —Alexandria, VA
- $125,000 - $145,000 a year
- Full-time
- Hybrid work
- Azure
- 5 years
- Windows
- Relocation assistance
- Health insurance
Quick Apply
7d
Sr. Cybersecurity Analyst
Horizontal Talent —Washington, DC
- $39 - $75 an hour
- Azure
- Writing skills
- AWS
- Health insurance
- Vision insurance
CARE Alert Monitoring Analyst - U.S. Citizenship Required
CGI Group, Inc. —Fairfax, VA
- $79,600 - $194,000 a year
- Rotating shift
- Hybrid work
- Background check
- Writing skills
- English
- Paid parental leave
- Paid holidays
12d
Tier 2 Security Operations Center (SOC) Analyst
Leidos —Alexandria, VA
- $87,100 - $157,450 a year
- Multiple hires
- Hybrid work
- Computer Science
- 5 years
- Office
4d
Continuous Monitoring Analyst
Leidos —Alexandria, VA
- $57,850 - $104,575 a year
- Full-time
- Mid-level
- Bachelor's degree
- Fair chance
10d
Incident Response Analyst
Leidos —Alexandria, VA
- $87,100 - $157,450 a year
- Full-time
- Hybrid work
- 5 years
- Mid-level
- Analysis skills
4d
Jr. Soc Analyst
DISRUPTIVE SOLUTIONS LLC —Vienna, VA
- Full-time
- Research
- Analysis skills
- Bachelor's degree
Quick Apply

I want to receive the latest job alert for security analyst in herndon va

By signing in to your account, you agree to SimplyHired's Terms of Service and consent to our Cookie and Privacy Policy.

Explore jobs in more locations

security analyst jobs near herndon va

VULNERABILITY MGMT ANALYST

Arete -
Falls Church, VA

Apply Now

Job Details

Full-time
$90,000 - $120,000 a year
6 days ago

Benefits

Paid parental leave
Disability insurance
Health insurance
Dental insurance
401(k)
Paid time off
Flextime
Parental leave
401(k) 5% Match
Vision insurance
Employee stock ownership plan
Life insurance

Qualifications

Vulnerability scanning implementation
Linux support
Technical documentation
Operating system updates
Patch management
Network scanners
Computer hardware
Computer management
Operating system security
Vulnerability management
Windows support
Windows Server administration
Technical writing experience within technology
Negotiation
Vuls

Full Job Description

Areté is looking for the person who makes sure vulnerabilities actually get closed - not just found. As our Vulnerability Management Analyst in Falls Church, VA, you will own the end-to-end remediation cycle - scanning, prioritization, patch qualification, deployment, and verification - across desktops, servers, network devices, and standalone systems on multiple sites and networks, working closely with Areté's Cyber Security staff.

This is a hands-on execution role, and you will be measured on whether vulnerabilities close on a recurring, risk-prioritized cadence. Equally important is doing so without breaking the business: qualifying patches before they are pushed, understanding which applications depend on pinned or vendor-locked component versions, coordinating maintenance windows with system owners, and having a tested rollback path when a patch goes wrong.

The selected candidate must hold an active Top Secret clearance and be able to maintain it. This position is onsite at our Falls Church, VA facility. The candidate may be required to travel occasionally and provide some afterhours support. This is an exempt non-supervisory full-time position.

Primary Responsibilities:

Conduct regular vulnerability assessments and serve as the technical expert with primary responsibility for vulnerability scanning and remediation of desktops, servers, network devices, and other systems across multiple sites, networks, and standalone environments.

Analyze scan results from Rapid7 and Tenable Security Center (ACAS) and produce a risk-prioritized remediation plan that accounts for severity, exploitability, exposure, asset criticality, and known-exploited-vulnerability status - not raw CVSS alone.

Execute continuous, recurring patching schedules against that prioritization, within maintenance windows authorized by the appropriate change control board.

Qualify patches before deployment: test in a representative environment, identify dependencies on pinned or vendor-supported component versions, assess impact to line-of-business and server applications, and document a rollback plan.

Identify vulnerabilities that cannot be resolved by patching alone - pinned application dependencies, end-of-life software, vendor-locked systems - and develop compensating controls, mitigation strategies, or upgrade recommendations in coordination with system owners and Cyber Security.

Coordinate with system owners and end users on upcoming patches and projected impacts, including reboots, service interruptions, and network-wide effects.

Verify remediation through rescanning and closure validation; track exceptions, deviations, and accepted risks through to resolution or formal acceptance.

Automate recurring scanning, patching, reporting, and remediation workflows to reduce manual effort and improve consistency.

Maintain vulnerability management processes and standard operating procedures, and maintain and report metrics for the function - remediation timeliness, aging, coverage, patch success and failure rates, and recurring problem areas.

Prepare and present reports on vulnerability management activities to IT and senior management, communicating complex technical information to non-technical stakeholders.

Stay current on emerging threats, actively exploited vulnerabilities, and vendor advisories, and recommend proactive measures.

Other duties, as assigned.

Experiences and Background We Look For:

Active Top Secret clearance, with the ability to maintain it.

Must have or be able to obtain a CompTIA Security+ CE certification within 120 days of employment, in accordance with DoDM 8140.03 and DFARS 252.239-7001.

Minimum of 3 years working as a System Administrator, Systems Engineer, Network Administrator, Vulnerability Analyst, or similar role.

Proficient understanding of computer hardware, software, and operating systems - primarily Microsoft Windows Server and Red Hat Enterprise Linux - with strong system troubleshooting skills across both.

Working knowledge of vulnerability scanning products such as Rapid7 (preferred), Tenable Security Center/Nessus (ACAS), or Qualys.

Experience with patch management tools such as PDQ Deploy, SCCM/MECM, WSUS, YUM/DNF, or Red Hat Satellite - including testing and qualifying patches prior to deployment, coordinating change-managed maintenance windows, and executing rollback when required.

Working scripting ability in PowerShell, Bash, or Python sufficient to automate recurring scan parsing, patch orchestration, and reporting tasks.

Strong interpersonal and written communication skills, with the ability to work autonomously, produce technical documentation, and negotiate remediation timelines with system owners who have competing priorities.

Nice to Have:

TS/SCI access with polygraph.

Advanced automation experience building patch orchestration or vulnerability reporting tooling.

Experience patching and maintaining airgapped, standalone, or classified systems, including offline content management and update ingestion.

Familiarity with DISA STIGs, SCAP Compliance Checker, and DoD or federal compliance frameworks (NIST 800-53, NIST 800-171, RMF).

Experience with container and application dependency scanning, and with SBOM-based vulnerability identification.

Experience managing vulnerabilities in third-party and line-of-business applications where a vendor pins supported runtime or library versions.

Industry certifications such as CySA+, Network+, CCNA, RHCSA, Microsoft AZ-800/801 or MD-102, GIAC GCED/GEVA, or vendor certifications in Rapid7 or Tenable/ACAS.

Bachelor's Degree in an Information Technology related discipline.

We have an impressive range of benefits, programs, and perks that we offer:

Generous PTO and Leave Times

Flextime Scheduling

Bereavement

Paid Time Off (PTO)

Paid Parental Leave

Financial Benefits

Company-funded 5% contribution to your 401(k) retirement plan

Company-funded 5% contribution to your Employee Stock Ownership Plan

Continuing Education Assistance

Health, Medical, and Wellness Benefits

Medical Insurance

Dental & Vision Insurance

Life Insurance and Long-Term Disability (LTD)

Vision Reimbursement

Apply Now

Refine Your Search

security analyst jobs in herndon va

VULNERABILITY MGMT ANALYST

Senior Security Analyst

Cyber Investigations Analyst - OTA / Active Top Secret

Security Compliance Analyst II

Cybersecurity Analyst – Security Standards & Baselines / Active Secret

Security & Compliance Analyst

Cybersecurity Analyst

Security Analyst I (Friday–Monday, 12am–11am CST)

SOC Analyst 2

Cybersecurity Analyst

Mid-Level SOC Analyst - Hybrid

Journeyman Cybersecurity Analyst

Sr. Security Test & Evaluation Analyst

Digital Forensic Analyst

Sr. Cybersecurity Analyst

CARE Alert Monitoring Analyst - U.S. Citizenship Required

Tier 2 Security Operations Center (SOC) Analyst

Continuous Monitoring Analyst

Incident Response Analyst

Jr. Soc Analyst

I want to receive the latest job alert for security analyst in herndon va

Related Searches

Explore jobs in more locations

Job Seeker Tools

Employer Tools

Browse

Stay Connected