Vulnerability Management Analyst - Us Federal

Workday

Reston, VA, USA
Base: $117,400 - $176,200 usd; bonus/equity: eligi...
Fully remote
Us federal government security requirements
Commercial scanning tool interpretation
Poam planning and management experience
Workday is seeking a Vulnerability Management Analyst for its U.S. Federal Government subsidiary in Reston, VA, who will manage vulnerabilities and collaborate with engineering teams to ensure compliance with government security standards. The ideal candidate should possess strong communication skills, technical expertise in vulnerability management, and experience with federal security frameworks

Job Summary

  • This role supports U.S. Federal Government contracts requiring strict adherence to security frameworks like FedRAMP and IL-4.
  • The analyst will prioritize vulnerabilities from commercial scan tools and manage Planning of Actions and Milestones (POAMs).
  • Workday offers a culture rooted in integrity and empathy with flexible work arrangements requiring at least 50% time in-office or field.

Matching Summary

Match Score: 85

Workday is seeking a Vulnerability Management Analyst for its U.S. Federal Government subsidiary in Reston, VA, who will manage vulnerabilities and collaborate with engineering teams to ensure compliance with government security standards. The ideal candidate should possess strong communication skills, technical expertise in vulnerability management, and experience with federal security frameworks.

Salary

Base: $117,400 - $176,200 USD; Bonus/Equity: Eligible for Workday Bonus Plan and stock grants; Benefits: Comprehensive benefits package available

Skills & Requirements

Must-have

  • US Federal Government security requirements
  • Commercial scanning tool interpretation
  • POAM planning and management experience
  • FedRAMP and NIST 800-171 knowledge
  • Cloud computing environment experience

Nice-to-have

  • Strong interpersonal and communication skills
  • Python scripting for productivity
  • Experience as a 3PAO assessor or ISSE
  • Defense or civilian agency background
  • Security+ CEH CISSP certifications

Key Requirements

  • United States citizenship required
  • Previous FedRAMP authorized environment experience
  • Working knowledge of Risk Management Framework (RMF)
  • Proficiency in Jira for ticket management

Work Rights

Must have US citizenship (naturalized or native)

Tailored Resume

Cover Letter