Senior Vulnerability Management Analyst

100% Fully Remote Position Responsibilities: Monitoring vulnerability scans and the status of scanning appliances in enterprise datacenters Participating in deployment meetings, reviewing network topologies to place scanners in proper areas of networks to gain visibility to assess security posture Running scheduled and ad hoc security reports detailing enterprise security posture Researching and troubleshooting networking issues and events to find root-cause analysis Develops risk-based mitigation strategies for networks, operating systems, and applications Conduct continuous monitoring and evaluate the effectiveness of the enterprise's cybersecurity safeguards Review security vulnerabilities across a variety of technologies and environments to resolve high risk vulnerabilities to business assets.

Review and define requirements for information security solutions Provide recommendations and guidance to the customer enabling program improvements and reducing risk across the enterprise.

Qualifications

Strong analytical and verbal communication skills Demonstrated ability to interact effectively with senior management and leadership 7-10 years of successful network and cloud-based troubleshooting experience Experience managing a large and complex network Maintain knowledge of applicable cyber defense policies, regulations, and compliance documents specifically related to vulnerability management.

Expertise with tools such as Nessus, Burp Suite, Metasploit, Kali Linux, NMAP, Nikto, WPScan, SQLmap Ability to craft enterprise-specific implementation guidance for system owners who are attempting to satisfy NIST SP 800-53 controls. Experience with an ISCM tool and leading ISCM tactics, tools, and procedures Experience and specialized training in DoD’s ACAS and HBSS systems, including Information Security Continuous Monitoring (ISCM) and Insider Threat (InT); Planning, execution, and assessment of threats Ability to conduct research on new and emerging information technologies and develop vulnerability assessment capabilities Preferred Qualifications: Dev.

Sec. Ops experience Experience with governance, risk assessment, and compliance for FISMA, FedRAMP, and NIST SP 800 series including NIST SP 800-37 and NIST SP 800-53, system security plans, security and privacy controls, POA&M management, assessment and authorization (A&A), Authority To Operate (ATO) and continuous monitoring processes Experience compiling and tracking vulnerabilities and mitigation results to quantify program effectiveness Experience creating and maintaining vulnerability management policies, procedures, and training Education/Certifications/Licenses: Bachelor's degree in Computer Science, Information Technology, Cyber Security or related field, or equivalent combination of education and experience and training 10+ years’ of Vulnerability Assessment experience One or more of the following certifications: CISSP Security+ Network+ CySA+ CompTIA The GIAC Security Essentials Certification Active Public Trust 6c clearance or higher or eligible for Public Trust 6c clearance Experience with governance, risk assessment and compliance for FISMA, FedRAMP, and NIST SP 800 series including NIST SP 800-37 and NIST SP 800-53, system