Description
We are currently seeking a Vulnerability Analyst to join the Compartmented Enterprise Services Office (CESO) effort. This program is establishing a modern secure web service (SWS) operation as part of a state-of-the-art, highly automated platform capable of supporting a rapidly expanding customer population.
The successful candidate will assist CESO as it migrates to a high security cloud environment, providing vulnerability management, risk assessment, and compliance services that protect the integrity of the platform throughout its lifecycle.
Primary Responsibilities
- Meet regulatory and non-regulatory compliance demands across the CESO environment
- Assist in managing and maintaining the Information Assurance Vulnerability Alerts (IAVA) program for CESO systems
- Manage and enforce information security policies and train end-users on proper security practices
- Conduct security and risk assessments using established frameworks, mitigating risk via security controls and testing
- Develop, update, and maintain Risk Management Framework (RMF) documentation
- Ensure data privacy throughout its lifecycle and perform vulnerability management activities
- Coordinate with infrastructure, storage, database, and application teams to align vulnerability management activities with CESO's operational and compliance requirements
- Maintain documentation, operational procedures, and compliance reports supporting CESO's secure cloud migration
Basic Qualifications
- Bachelor's degree and 2+ years of related IT security experience
- Active TS/SCI security clearance required
- DoDD 8140 compliant certification, at minimum IAT Level II
- Experience with the Defence Information Systems Agency (DISA) security model and controls
- Experience conducting Information Assurance Vulnerability Alerts (IAVA) activities
- Experience creating Information Assurance documentation
- Experience with ACAS and SEIM tools
- Experience with application and hardware security settings
Preferred Qualifications
- Prior experience with DISA and DISA's support to mission partners
- TS/SCI with CI Polygraph preferred
- Experience with ACAS, SPLUNK, ACT, IAVA reporting, and eMASS
- Familiarity with vulnerability management across enterprise applications and infrastructure
- Understanding of disaster recovery and business continuity concepts