# Vulnerability Analyst

**Company**: Leidos
**Location**: San Antonio, TX
**Work arrangement**: onsite
**Experience**: senior
**Job type**: full-time
**Salary**: $69,550.00 - $125,725.00
**Category**: Security
**Industry**: Technology

**Apply**: https://leidos.wd5.myworkdayjobs.com/en-US/External/job/San-Antonio-TX/Vulnerability-Analyst---Night-Shift_R-00193750?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_66b56e59-00d

## Description

We are currently seeking a Vulnerability Analyst to join the Compartmented Enterprise Services Office (CESO) effort. This program is establishing a modern secure web service (SWS) operation as part of a state-of-the-art, highly automated platform capable of supporting a rapidly expanding customer population.

The successful candidate will assist CESO as it migrates to a high security cloud environment, providing vulnerability management, risk assessment, and compliance services that protect the integrity of the platform throughout its lifecycle.

**Primary Responsibilities**

- Meet regulatory and non-regulatory compliance demands across the CESO environment

- Assist in managing and maintaining the Information Assurance Vulnerability Alerts (IAVA) program for CESO systems

- Manage and enforce information security policies and train end-users on proper security practices

- Conduct security and risk assessments using established frameworks, mitigating risk via security controls and testing

- Develop, update, and maintain Risk Management Framework (RMF) documentation

- Ensure data privacy throughout its lifecycle and perform vulnerability management activities

- Coordinate with infrastructure, storage, database, and application teams to align vulnerability management activities with CESO's operational and compliance requirements

- Maintain documentation, operational procedures, and compliance reports supporting CESO's secure cloud migration

**Basic Qualifications**

- Bachelor's degree and 2+ years of related IT security experience

- Active TS/SCI security clearance required

- DoDD 8140 compliant certification, at minimum IAT Level II

- Experience with the Defence Information Systems Agency (DISA) security model and controls

- Experience conducting Information Assurance Vulnerability Alerts (IAVA) activities

- Experience creating Information Assurance documentation

- Experience with ACAS and SEIM tools

- Experience with application and hardware security settings

**Preferred Qualifications**

- Prior experience with DISA and DISA's support to mission partners

- TS/SCI with CI Polygraph preferred

- Experience with ACAS, SPLUNK, ACT, IAVA reporting, and eMASS

- Familiarity with vulnerability management across enterprise applications and infrastructure

- Understanding of disaster recovery and business continuity concepts

## Skills

### Required
- Information Assurance Vulnerability Alerts (IAVA)
- Risk Management Framework (RMF)
- ACAS
- SEIM
- DISA security model
- DoDD 8140 compliant certification

### Nice to have
- SPLUNK
- ACT
- IAVA reporting
- eMASS
- CI Polygraph

---

Source: [Apply at leidos.wd5.myworkdayjobs.com](https://leidos.wd5.myworkdayjobs.com/en-US/External/job/San-Antonio-TX/Vulnerability-Analyst---Night-Shift_R-00193750?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)