Healthcare Security Operations Consultant

• Support vulnerability management and secure configuration operations, ensuring alignment with federal cybersecurity mandates.
• Manage, monitor, and monitor vulnerabilities across NIH/HHS systems using tools such as Tenable and coordinate timely remediation activities.
• Develop vulnerability prioritization models based on risk, exposure, and asset criticality.
• Develop secure configuration baselines and monitoring processes based on CIS Benchmarks.
• Ensure compliance with patching timelines and federal vulnerability directives.
• Collaborate with infrastructure, application, and security teams to validate remediation actions.
• Support preparation of reports for leadership and federal oversight bodies.
• Develop KPI metrics for vulnerability and compliance gap closure rates, asset risk scoring, and compliance tracking.

Do you have experience in Vuls?, Do you have a Bachelor’s degree?, * Must be able to OBTAIN and MAINTAIN a Federal or DoD “PUBLIC TRUST”; candidates must obtain approved adjudication of their PUBLIC TRUST prior to onboarding with Guidehouse. Candidates with an ACTIVE PUBLIC TRUST or SUITABILITY and maintain an active HHS/NIH clearance are preferred.

• Minimum of THREE (3) years of cybersecurity or IT risk management experience, candidates with experience focused on vulnerability management and/or secure configuration are preferred.
• Minimum of a Bachelors Degree is required.
• Tools: Hands-on experience with Tenable.
• Knowledge: Deep understanding of HIPAA and cybersecurity frameworks.
• Soft Skills: Strong communication and analytical thinking; ability to manage multiple concurrent priorities and deadlines.
• Experience with ServiceNow or Splunk Security Essentials.
• Experience supporting security hardening of infrastructure supporting EHR systems.

What Would Be Nice To Have:

• Certifications: Active CompTIA Security+ CE preferred. Other certifications (CISSP, CEH, or cloud-related) are a plus.
• Familiarity with ServiceNow or Splunk Security Essentials.
• Knowledge of MITRE ATT&CK framework and vulnerability prioritization methodologies (e.g., EPSS, CVSS v3).
• Prior experience within a federal or HHS environment.

Pulled from the full job description

• Referral program
• Tuition reimbursement
• Parental leave
• 401(k)
• Health insurance
• Vision insurance
• Health savings account, The annual salary range for this position is $98,000.00-$163,000.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

Benefits include:

• Medical, Rx, Dental & Vision Insurance
• Personal and Family Sick Time & Company Paid Holidays
• Position may be eligible for a discretionary variable incentive bonus
• Parental Leave and Adoption Assistance
• 401(k) Retirement Plan
• Basic Life & Supplemental Life
• Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts
• Short-Term & Long-Term Disability
• Student Loan PayDown
• Tuition Reimbursement, Personal Development & Learning Opportunities
• Skills Development & Certifications
• Employee Referral Program
• Corporate Sponsored Events & Community Outreach
• Emergency Back-Up Childcare Program
• Mobility Stipend

About Guidehouse

Guidehouse is an Equal Opportunity Employer-Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation.

Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.