---
title: 'Vulnerability Assessment Analyst at Seneca Holdings'
canonical: 'https://feeny.ai/job/vulnerability-assessment-analyst-seneca-holdings-mechanicsburg-ne6w8frbvj4f'
type: 'job'
last_seen: '2026-10-23'
---

# Vulnerability Assessment Analyst at Seneca Holdings

- **Company:** Seneca Holdings
- **Location:** Mechanicsburg, PA
- **Posted:** 2026-10-16
- **Last confirmed live:** 2026-10-23
- **Apply:** https://senecaholdings.com/jobs/?gh_jid=4743973005

## Job description

Seneca Technologies is part of the Seneca Nation Group (SNG) portfolio of companies. SNG is Seneca Holdings’ federal government contracting business that meets mission-critical needs of federal civilian, defense, and intelligence community customers. Our portfolio comprises multiple subsidiaries that participate in the Small Business Administration 8(a) program. To learn more about SNG, visit [the website](https://senecanationgroup.com/) and follow us on [LinkedIn](https://www.linkedin.com/company/seneca-holdings-llc/).

Our team of talented individuals is what makes us successful. To support our team, we provide a balanced mix of benefits and programs. Your total rewards package includes competitive pay, benefits, and perks, flexible work-life balance, professional development opportunities, and performance and recognition programs. We offer a comprehensive benefits package that includes medical, dental, vision, life, and disability, voluntary benefit programs (critical illness, hospital, and accident), health savings and flexible spending accounts, and retirement 401K plan. One of our fundamental principles is to offer competitive health and welfare benefits to our team members, providing coverage and care for you and your family. Full-time employees working at least 30 hours a week on a regular basis are eligible to participate in our benefits and paid leave programs.  We pride ourselves on our collaborative work environment and culture, which embraces our mission of providing financial and non-financial benefits back to the members of the Seneca Nation.

Seneca Technologies is hiring for a Vulnerability Assessment Analyst. The Vulnerability Assessment Analyst supports a Department of War (DOW) agency contractor environment cybersecurity operations mission by identifying, assessing, and tracking security vulnerabilities across on-premises and cloud-based environments. The analyst is responsible for conducting vulnerability scans, analyzing findings, recommending remediation actions, and supporting risk-based decision-making. This position works closely with system owners, cybersecurity teams, and stakeholders to improve the agency's security posture through continuous assessment, reporting, and remediation tracking activities.

Key Responsibilities:

- Conduct vulnerability scans and security assessments of information systems, applications, networks, and cloud environments.
- Analyze vulnerability assessment results and determine the potential impact to systems and mission operations.
- Develop and recommend remediation strategies to address identified vulnerabilities and security weaknesses.
- Track vulnerability remediation efforts and coordinate with system owners to ensure timely resolution of findings.
- Support continuous monitoring programs through recurring assessments and validation of corrective actions.
- Perform risk-based analysis to prioritize vulnerabilities based on severity, exploitability, and mission impact.
- Generate reports, metrics, dashboards, and status updates related to vulnerability management activities.
- Validate remediation efforts through rescanning and follow-up assessments.
- Support Risk Management Framework (RMF) activities by providing vulnerability assessment data and supporting authorization decisions.
- Collaborate with cybersecurity, engineering, cloud, and operations teams to improve system security and compliance.
- Assist with cybersecurity inspections, audits, compliance reviews, and security assessments.
- Maintain assessment documentation and support reporting requirements for leadership and stakeholders.

Required Qualifications:

- Demonstrated experience performing vulnerability assessments, security scanning, and cybersecurity analysis.
- Experience analyzing security findings and recommending risk-based remediation actions.
- Working knowledge of Department of War (DOW) cybersecurity requirements and vulnerability management processes.
- Understanding of Risk Management Framework (RMF), security authorization, and continuous monitoring principles.
- Experience supporting remediation tracking and compliance reporting activities.
- Strong analytical, problem-solving, and communication skills.
- Ability to work independently and collaboratively within a mission-focused cybersecurity environment.
- S. citizenship and ability to obtain and maintain all required government security clearances, as applicable.
- One or more of the following certifications:
- CompTIA Security+ CE
- CompTIA CySA+
- Certified Ethical Hacker (CEH)
- Tenable Certification
- Comparable vulnerability assessment or cybersecurity certification

Education & Experience

- Possess current Secret Clearance plus one of the following:
- Bachelor's degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, or a related field and a minimum of five (5) years of experience in vulnerability management, cybersecurity assessments, RMF, or system security activities.
- Or minimum of nine (9) years of directly relevant cybersecurity, vulnerability assessment, or system security experience in lieu of a degree.

Technical Skills & Knowledge

Vulnerability Assessment & Management

- Vulnerability Scanning and Analysis
- Vulnerability Prioritization and Risk Assessment
- Remediation Planning and Tracking
- Security Configuration Assessment
- Risk-Based Vulnerability Management
- Continuous Monitoring and Validation

Security Assessment Tools

- Tenable Nessus
- Tenable Security Center or Equivalent Platforms
- Vulnerability Assessment and Compliance Tools
- Security Reporting and Dashboard Solutions

Cloud Security Tools & Platforms

- AWS Native Security Monitoring Tools
- Microsoft Azure Security Monitoring Tools
- Google Cloud Platform (GCP) Security Monitoring Tools
- Cloud Vulnerability Assessment and Configuration Review

Risk Management & Compliance

- DOW Risk Management Framework (RMF)
- NIST Special Publication 800-37
- Security Authorization and Accreditation Processes
- Continuous Monitoring Programs
- Security Control Validation
- Plan of Action & Milestones (POA&M) Management

Cybersecurity Knowledge Areas

- Network Security Principles
- Threat and Vulnerability Analysis
- Security Compliance Requirements
- Security Reporting and Metrics
- Remediation Verification
- Cyber Risk Analysis and Mitigation

Location: Mechanicsburg, PA. Remote work may be authorized. Employees working remotely must reside within commuting distance of an approved SIPRNet access location and be available to support classified work requirements as needed.

Clearance: Active Secret

Travel: Some CONUS travel required

Equal Opportunity Statement: Seneca Holdings provides equal employment opportunities to all employees and applicants without regard to race, color, religion, sex/gender, sexual orientation, national origin, age, disability, marital status, genetic information and/or predisposing genetic characteristics, victim of domestic violence status, veteran status, or other protected class status. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leave of absence, compensation and training. The Company also prohibits retaliation against any employee who exercises his or her rights under applicable anti-discrimination laws. Notwithstanding the foregoing, the Company does give hiring preference to Seneca or Native individuals. Veterans with expertise in these areas are highly encouraged to apply.

## About Seneca Holdings

## Company Overview
- **One-liner**: Seneca Holdings is the investment arm of the Seneca Nation, a federally recognized American Indian Tribe, that builds and manages a diversified portfolio of businesses to generate long-term economic self-sufficiency for the Nation.
- **Entity Type**: Private (wholly owned by the Seneca Nation, not VC-backed)
- **Headquarters**: Buffalo, New York, USA
- **Founded**: 2009
- **Founders**: Formed by the Seneca Nation; founding leadership not individually named

## Core Business
- **Primary industries**: Diversified holding company with businesses in federal government contracting, environmental solutions, corporate/leisure travel management, and sports & entertainment.
- **Target customers**: B2G (federal government agencies), B2B (commercial clients), and B2C (travel and sports fans).
- **Mission statement**: “To build a portfolio of profitable businesses that delivers long-term, sustained income and economic self-sufficiency to the Seneca Nation.”

## Products & Services
- **Seneca Nation Group (SNG)**: Federal government contracting services (IT, cybersecurity, professional services, facilities management). SNG holds a CMMC 2.0 Level 2 certification.
- **Seneca Environmental**: Environmental remediation, sustainability, and “Earth healing” energy alternatives.
- **CI Azumano Travel**: Corporate travel management, government travel, and leisure travel services.
- **Rochester Knighthawks**: Professional lacrosse team (National Lacrosse League).
- **Fiber Broadband Network**: In partnership with Seneca Energy, a high-speed fiber network serving homes and businesses on the Cattaraugus Territory of the Seneca Nation.

## Market Standing
- **Valuation**: Not publicly disclosed (private, tribally owned)
- **Key Metrics**:
  - Over 1,300 team members across the U.S. and internationally (as of 2025)
  - 8+ portfolio companies
  - CMMC 2.0 Level 2 certification (DoD cybersecurity standard)
- **Notable Investors/Partners**: Wholly owned by the Seneca Nation; no external investors. Partners include the U.S. Department of Defense (via SNG) and Seneca Energy.
- **Growth Signals**:
  - Expanded into fiber broadband infrastructure on tribal territories
  - Achieved CMMC certification, enabling deeper federal contracting
  - Continued diversification into environmental and travel sectors
  - Active recruitment with over 1,300 employees, indicating steady growth

## Competitive Advantages
- **Unique tribal status**: As a Native-owned entity, Seneca Holdings benefits from federal government contracting preferences (e.g., 8(a) program eligibility), enhanced financing options, and tax immunity.
- **Seventh Generation Principle**: Long-term decision-making focused on sustainability and positive impact for seven generations, differentiating from short-term profit-driven firms.
- **Diversified portfolio**: Spread across government, environmental, travel, and sports reduces risk and creates cross-sector synergies.
- **Deep cultural connection**: Strong ties to the Seneca Nation provide a stable, mission-driven ownership structure.

## Strategic Focus
- **Portfolio diversification**: Continue acquiring and building businesses across non-gaming sectors to reduce reliance on any single revenue stream.
- **Federal market expansion**: Leverage CMMC certification and tribal preferences to win more DoD and civilian agency contracts.
- **Infrastructure investment**: Expand the fiber broadband network to additional tribal territories and potentially beyond.
- **Talent development**: Partner with on-territory programs to train and hire Seneca Nation members, building a pipeline of future leaders.

## Why Work Here
- **Purpose-driven mission**: Every role contributes to the economic self-sufficiency of the Seneca Nation and future generations.
- **Culture**: Collaborative, values-driven (Quality, Teamwork, Integrity, Professionalism, Connection), with a strong emphasis on respect and community.
- **Benefits**: Comprehensive package including affordable medical/dental/vision, HSA with employer contributions, 401K with immediate vesting and match, generous PTO and 11 paid holidays, wellness program, professional development reimbursement, and employee rewards program.
- **Work environment**: Hybrid/office policy not explicitly stated; roles span across the U.S. with some remote possibilities. The culture emphasizes teamwork and connection.
- **Veteran-friendly**: Virginia Values Veterans (V3) certified, actively seeks veteran talent.
- **Growth opportunities**: Professional development reimbursement, internships for Seneca students, and a commitment to promoting from within.
- **Note on scams**: The company has issued a warning about recruitment scams; applicants should only apply through the official careers page (senecaholdings.com/careers).

## Sources
1. [Seneca Holdings – Official Website](https://senecaholdings.com/)
2. [Seneca Holdings – About Us](https://senecaholdings.com/about-us/)
3. [Seneca Holdings – Careers](https://senecaholdings.com/careers/)
4. [Seneca Holdings – Jobs](https://senecaholdings.com/jobs/)
5. [Seneca Holdings – Leadership](https://senecaholdings.com/leadership/)

## Other roles at Seneca Holdings

- [Gameday Assistant/Flight Crew](https://feeny.ai/job/gameday-assistant-flight-crew-seneca-holdings-rochester-5nc9a9hed8yn) — Rochester, NY
- [Acquisition Analyst III](https://feeny.ai/job/acquisition-analyst-iii-seneca-holdings-arlington-5pt0v1acf9x4) — Arlington, VA
- [Air Force Financial Management Journeyman](https://feeny.ai/job/air-force-financial-management-journeyman-seneca-holdings-dayton-mgt930tb599k) — Dayton, OH
- [COMSEC Account Manager](https://feeny.ai/job/comsec-account-manager-seneca-holdings-orlando-bj8w4jb54jgt) — Orlando, FL
- [Customer Service Analyst (Active Secret Clearance Required)](https://feeny.ai/job/customer-service-analyst-active-secret-clearance-required-seneca-holdings-3nxyfx3dakw1) — Washington, DC
- [Information Systems Security Officer](https://feeny.ai/job/information-systems-security-officer-seneca-holdings-mechanicsburg-mbjnsr0hdtqf) — Mechanicsburg, PA
- [Information Assurance Specialist](https://feeny.ai/job/information-assurance-specialist-seneca-holdings-mechanicsburg-59mq2s5dp83a) — Mechanicsburg, PA
- [Computer Defense Network Analyst](https://feeny.ai/job/computer-defense-network-analyst-seneca-holdings-mechanicsburg-x39e4spv77cq) — Mechanicsburg, PA
- [Lead Data Protection Engineer (Active Top Secret Clearance)](https://feeny.ai/job/lead-data-protection-engineer-active-top-secret-clearance-seneca-holdings-8tm2p53m1m9j) — Beltsville MD OR Lakewood, CO
- [Ticket Sales Account Executive](https://feeny.ai/job/ticket-sales-account-executive-seneca-holdings-rochester-2qqfmq03akvk) — Rochester, NY