Cyber Security Specialist - Vulnerability Analyst

Apogee Engineering•Offutt AFB, NE

4d•Onsite

About The Position

Apogee has an exciting new opportunity for a Cyber Security Specialist II- Vulnerability Analyst in support of the Air Force Nuclear Weapons Center Combatant Command, Command and Control (C2) Division (AFNWC/NCC). The Rogue Blue Software (RBS) Vulnerability Analyst must possess the technical and administrative skills needed to prioritize findings by severity, impact, and exploitability, communicate remediation requirements clearly to technical teams, and maintain the documentation necessary to demonstrate a controlled vulnerability posture. They would be responsible for the following activities, as well as supporting the other RBS Cyber Support Team (CST) activities. This is a full-time position located at Offutt AFB, NE.

Requirements

Must be a US citizen
Must possess and maintain a TS w/SCI eligibility
CISSP or equivalent IAM II or DOD 8140 Level II
High School Diploma
Minimum of 15 years of relevant experience to include: 5 years directly supporting the DoD
Strong knowledge and experience applying DoDD 8500.1 Information Assurance, DoDD 8520.1 Protection of SCI, DoDI 8510.01 Risk Management Framework (RMF) for DoD Information Technology, DoD 8570.01M Information Assurance Workforce Improvement Program, and DoDI 8580.1 Information Assurance in the Defense Acquisition Process used for the analysis of user, policy, regulatory, and resource demands

Nice To Haves

Education: Bachelor's degree
Years of Experience: 10 years of relevant experience
Minimum of 3 years providing direct support to the DoD
Knowledge and experience with NIST 800-53 and DoD Risk Management Framework tools (eMASS/Xacta)

Responsibilities

Consistently review findings for the security tools
Develop and provide structures and prioritized remediation guidance to the RBS (Platform Services Team (PST) and Infrastructure Services Team (IST) engineering teams
Actively track and ensure IAVM deadlines are met
Track and manage all findings from identification through closure
Provide analytical and technical security recommendations to other team members, oversight boards, and clients
Identify requirements, based upon need or as the result of a security issue that could put organizations' systems at risk
Create, maintain, and documents security baselines
Active member in technical working groups to recommend effective security configurations
Develop documentation to support ongoing security systems operations, maintenance, and specific problem resolution
Work with and coordinate appropriate IT staff to implement solutions that will meet or exceed customer expectations
Provide risk analysis for vulnerabilities, incidents, and change requests