Description
We are currently seeking a Vulnerability Analyst to join the Compartmented Enterprise Services Office (CESO) effort. This program is establishing a modern secure web service (SWS) operation as part of a state-of-the-art, highly automated platform capable of supporting a rapidly expanding customer population.
The successful candidate will assist CESO as it migrates to a high security cloud environment, providing vulnerability management, risk assessment, and compliance services that protect the integrity of the platform throughout its lifecycle.
Primary Responsibilities
- Meet both regulatory and non-regulatory compliance demands across the CESO environment.
- Assist in managing and maintaining the Information Assurance Vulnerability Alerts (IAVA) program for CESO systems.
- Manage and enforce information security policies, and train and educate end-users on proper security practices.
- Conduct security and risk assessments using established frameworks, mitigating risk via security controls and testing and evaluation to certify and accredit commercial security products used within the CESO platform.
- Develop, update, organize, maintain, and track Risk Management Framework (RMF) documentation using information obtained from the customer.
- Ensure privacy of data throughout its lifecycle; perform vulnerability management, business continuity, and disaster recovery activities.
- Coordinate with infrastructure, storage, database, and application teams to align vulnerability management activities with CESO's operational and compliance requirements.
- Maintain documentation, operational procedures, and compliance reports supporting CESO's secure cloud migration.
Basic Qualifications
- Bachelor's degree and 2+ years of related IT security experience; additional experience, education, or training may be considered in lieu of degree.
- Active TS/SCI security clearance required.
- DoD Directive 8140 compliant certification, at minimum IAT Level II.
- Experience with the Defence Information Systems Agency (DISA) security model, controls, and authorization processes.
- Experience conducting activities associated with Information Assurance Vulnerability Alerts (IAVA).
- Experience with creating Information Assurance documentation.
- Experience with ACAS and SEIM tools.
- Experience with application and hardware security settings.
Preferred Qualifications
- Prior experience with DISA and DISA's support to mission partners.
- TS/SCI with CI Polygraph preferred.
- Experience with ACAS, SPLUNK, ACT, IAVA reporting, and eMASS.
- Familiarity with vulnerability management across enterprise applications and infrastructure.
- Understanding of disaster recovery and business continuity concepts.
The position is based in Arlington, VA and is 100% on-site. Requires a TS/SCI US Government Security Clearance to start. The pay range for this role is $69,550.00 - $125,725.00.