Vulnerability Management Analyst

TQI Solutions seeks proactive, visionary thought leaders to drive impactful solutions for clients.

We value our team, offering work-life balance, excellent benefits, and career growth.

Join us and immerse yourself in a rewarding experience like no other.

TQI Solutions is actively seeking a collaborative and skilled Vulnerability Management Specialist to join our dedicated team supporting the Pearl Harbor Naval Shipyard & Intermediate Maintenance Facility (PHNSY & IMF) at Joint Base Pearl Harbor-Hickam in Honolulu, HI.

This role will provide critical cybersecurity support within the Network Operations Security Center (NOSC), focusing on vulnerability identification, assessment, tracking, reporting, and remediation coordination across Navy IT systems and networks.

The ideal candidate will possess strong technical and analytical skills, with experience utilizing cybersecurity tools such as ACAS and VRAM to strengthen cybersecurity readiness, reduce operational risk, and maintain compliance with Department of Defense (DoD) and Department of the Navy (DON) requirements.

The estimated salary range for this role is $60,000 - $90,000 per year.

Final compensation is dependent upon the candidate's skills, qualifications, contract-specific guidelines, and geographic location.

TQI is committed to pay equity and compliance with Hawaii pay transparency requirements.

We do not request or consider prior salary history when making employment offers.

Responsibilities: • Conduct routine vulnerability assessments using Assured Compliance Assessment Solution (ACAS), including Tenable Nessus and Tenable Security Center.

• Monitor and analyze vulnerability scan results to identify security weaknesses, configuration deficiencies, and potential cybersecurity risks.

• Evaluate vulnerability findings to determine severity, affected assets, operational impact, and remediation priorities.

• Maintain vulnerability scanning schedules and coordinate assessments with system and network administrators to minimize operational disruptions.

• Investigate scan discrepancies, incomplete results, and potential false positives to ensure accurate vulnerability reporting.

• Utilize Vulnerability Remediation Asset Manager (VRAM) and other authorized DoD systems to track, document, and report identified vulnerabilities.

• Coordinate with system administrators, network administrators, and cybersecurity personnel to facilitate timely remediation and corrective actions.

• Monitor remediation progress, validate corrective actions through follow-up assessments, and document closure of vulnerability findings.

• Track vulnerabilities associated with Information Assurance Vulnerability Alerts (IAVAs), Information Assurance Vulnerability Bulletins (IAVBs), and other applicable cybersecurity directives.

• Identify overdue vulnerabilities, recurring deficiencies, and remediation challenges requiring escalation.

• Support the development and maintenance of Plans of Action and M...