Enterprise Cybersecurity Vulnerability Risk Analyst - Booz Allen Hamilton

Key Responsibilities

• Collect, validate, and triage vulnerability findings across enterprise systems, including on‑premise and cloud environments.
• Perform risk assessments to prioritize remediation, deferral, or exception actions based on business impact and threat landscape.
• Coordinate with IT, development, and business owners to assign clear ownership, track remediation progress, and enforce timelines.
• Develop and maintain documentation for vulnerability exception requests, deferral justifications, and appeal processes.
• Generate regular risk‑focused reports and dashboards for senior leadership, highlighting trends and remediation status.

Requirements

• 3+ years of experience in vulnerability management, security risk analysis, or related information security roles.
• Strong understanding of CVE databases, CVSS scoring, and common remediation frameworks.
• Experience working with cloud platforms (e.g., AWS, Azure) and associated security controls.
• Proficiency in creating clear, actionable risk communications for technical and non‑technical stakeholders.
• Relevant certifications such as CISSP, GSEC, or equivalent are preferred.