Vulnerability Assesment Specialist

Computer Network Defense Vulnerability Assessment Specialist

Location: Springfield, VA

Clearance: TS/SCI w/ CI Poly Overview

We are hiring a great opportunity for a Computer Network Defense Vulnerability Assessment Specialist - Top Secret clearance. This position will be based in Springfield, VA. The position requires you to be onsite. This position will require U.S. Citizenship and an active DoD TS/SCI clearance with the ability to obtain and maintain a Counterintelligence (CI) Polygraph.

Position Description

The CND Vulnerability Assessment Specialist is an expert in vulnerability methodologies, assessments, and cybersecurity scanners/tools.

Responsibilities

The CND Specialist is responsible for the following activities:

• Developing and executing the organization's continuous vulnerability assessment
• Measuring the effectiveness of defense-in-depth mechanisms against vulnerabilities and developing recommendations to remediate systemic security issues.
• Configuring, operating, maintaining, and evaluating the effectiveness of vulnerability scanning and assessment toolsets.
• Monitoring, evaluating, and reporting on system/network misconfigurations, non-compliance, unauthorized assets, false positives, and baseline deviations.
• Assessing the level of risk introduced by vulnerabilities and developing remediation
• Investigating and analyzing cybersecurity incidents to ensure the appropriate response activities and mitigations are applied.
• Distributing periodic vulnerability assessment reports, summaries, notifications, and an annual vulnerability assessment scorecard to CIO leadership and IT stakeholders.
• Developing and maintaining documentation as it pertains to the use and operation of vulnerability assessment tools and methodologies (SOPs, assessment plants, test plants, ).

Position Qualifications

• Seven or more years of progressive, hands-on experience as a cybersecurity analyst, administrator, or engineer responsible for Enterprise vulnerability management toolsets (e.g., ACAS, Tenable, Nessus, Rapid7, AppSpider, SCAP, STIG Viewer, etc.).
• Demonstrated proficiency and expertise in the following areas:
  • Applying computer networking concepts, protocols, and security methodologies to Enterprise information systems.
  • Developing and applying risk management methodologies and processes (e.g., methods for assessing and mitigating risk).
  • Securing and evaluating information systems for compliance with DISA
• Excellent initiative, problem-solving, and analytical skills with an ability to work both independently and as a team.
• Excellent written, verbal, communication, presentation, and reporting

Desired Qualifications

• Operating in a Cybersecurity Operations Center
• Engineering/administering a variety of IT devices/tools such as Windows, Linux, Cisco, Citrix, VMWare, Active Directory, Splunk, ePO, Trellix, Tanium, Ivanti, Sentinel One, CrowdStrike,
• Conducting penetration testing, packet inspection/analysis, malware detection, data loss prevention, incident response, forensics, etc.

CSWF Requirements

Cybersecurity > Vulnerability Assessment Analyst (541) > Intermediate Level

Requests for reasonable accommodation will be considered to enable individuals with disabilities to perform the principal (essential) functions of this job.