# Vulnerability Analyst

**Company**: Leidos
**Location**: Arlington, VA
**Work arrangement**: onsite
**Experience**: senior
**Job type**: full-time
**Salary**: $69,550.00 - $125,725.00
**Category**: Security
**Industry**: Consulting

**Apply**: https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Arlington-VA/Vulnerability-Analyst_R-00192830?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_a5eb2715-347

## Description

We are currently seeking a Vulnerability Analyst to join the Compartmented Enterprise Services Office (CESO) effort. This program is establishing a modern secure web service (SWS) operation as part of a state-of-the-art, highly automated platform capable of supporting a rapidly expanding customer population.

The successful candidate will assist CESO as it migrates to a high security cloud environment, providing vulnerability management, risk assessment, and compliance services that protect the integrity of the platform throughout its lifecycle.

**Primary Responsibilities**

- Meet both regulatory and non-regulatory compliance demands across the CESO environment.

- Assist in managing and maintaining the Information Assurance Vulnerability Alerts (IAVA) program for CESO systems.

- Manage and enforce information security policies, and train and educate end-users on proper security practices.

- Conduct security and risk assessments using established frameworks, mitigating risk via security controls and testing and evaluation to certify and accredit commercial security products used within the CESO platform.

- Develop, update, organize, maintain, and track Risk Management Framework (RMF) documentation using information obtained from the customer.

- Ensure privacy of data throughout its lifecycle; perform vulnerability management, business continuity, and disaster recovery activities.

- Coordinate with infrastructure, storage, database, and application teams to align vulnerability management activities with CESO's operational and compliance requirements.

- Maintain documentation, operational procedures, and compliance reports supporting CESO's secure cloud migration.

**Basic Qualifications**

- Bachelor's degree and 2+ years of related IT security experience; additional experience, education, or training may be considered in lieu of degree.

- Active TS/SCI security clearance required.

- DoD Directive 8140 compliant certification, at minimum IAT Level II.

- Experience with the Defence Information Systems Agency (DISA) security model, controls, and authorization processes.

- Experience conducting activities associated with Information Assurance Vulnerability Alerts (IAVA).

- Experience with creating Information Assurance documentation.

- Experience with ACAS and SEIM tools.

- Experience with application and hardware security settings.

**Preferred Qualifications**

- Prior experience with DISA and DISA's support to mission partners.

- TS/SCI with CI Polygraph preferred.

- Experience with ACAS, SPLUNK, ACT, IAVA reporting, and eMASS.

- Familiarity with vulnerability management across enterprise applications and infrastructure.

- Understanding of disaster recovery and business continuity concepts.

The position is based in Arlington, VA and is 100% on-site. Requires a TS/SCI US Government Security Clearance to start. The pay range for this role is $69,550.00 - $125,725.00.

## Skills

### Required
- Information Assurance Vulnerability Alerts (IAVA)
- Risk Management Framework (RMF)
- ACAS
- SEIM
- DISA security model
- Defence Information Systems Agency (DISA)
- Cybersecurity and Infrastructure Security Agency (CISA)

### Nice to have
- SPLUNK
- ACT
- IAVA reporting
- eMASS
- CI Polygraph

---

Source: [Apply at leidos.wd5.myworkdayjobs.com](https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Arlington-VA/Vulnerability-Analyst_R-00192830?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)