Enterprise Cybersecurity Vulnerability Analyst, Senior

Booz Allen Hamilton • McLean, VA

99d • $86,800 - $198,000

About The Position

In this role, you will support Booz Allen Hamilton's Enterprise Cybersecurity (ECS) team through utilizing enterprise-level vulnerability scanning and assessment tools to identify all internally and externally facing vulnerabilities and security misconfigurations present across the Booz Allen network. You will validate that appropriate patches or mitigations are in place within defined Service Level Agreements (SLA) and conduct analysis and serve as a vulnerability management resource in supporting the company's client facing and internal support teams. Additionally, you will keep up to date with emerging threats within the industry and collaborate with other Cybersecurity teams in a Cyber Fusion Center (CFC) environment to understand the impact of security threats and possible impacts to the global enterprise and conduct direct outreach to affected environments to ensure rapid remediation occurs and as needed, assist the Vulnerability Management Team lead with providing metrics and KPIs to other operational teams and senior leadership.

Requirements

• 4+ years of experience in a vulnerability analyst role, including identifying and remediating cloud vulnerabilities and misconfigurations.
• 2+ years of experience in Windows and UNIX system administration.
• Experience with managing, deploying, and securing resources within Amazon Web Services (AWS), Azure, or Google Cloud.
• Experience with Tenable Cloud Security and Tenable Security Center.
• Knowledge of basic networking protocols including TCP/IP, UDP, HTTP/HTTPS, SSH, and DNS.
• Ability to communicate effectively with clients, including supporting teams and management.
• Ability to obtain a Secret clearance.
• HS diploma or GED.

Nice To Haves

• Experience deploying, managing and administering Tenable Security Center or multiple Nessus scanners.
• Experience with Splunk, including building search queries.
• Knowledge of vulnerabilities, cyber threats, and information security tools.
• Knowledge of open security standards and projects, including OWASP.
• Global Security Essentials Certification (GSEC), GIAC Continuous Monitoring Certification (GMON), GIAC Certified Intrusion Analyst (G CIA), or CompTIA Security+.
• Possession of excellent verbal and writing communication skills.
• Bachelor's degree in Computer Science.

Responsibilities

• Utilize enterprise-level vulnerability scanning and assessment tools to identify vulnerabilities and security misconfigurations.
• Validate that appropriate patches or mitigations are in place within defined Service Level Agreements (SLA).
• Conduct analysis and serve as a vulnerability management resource.
• Collaborate with other Cybersecurity teams in a Cyber Fusion Center (CFC) environment.
• Keep up to date with emerging threats within the industry.
• Conduct direct outreach to affected environments to ensure rapid remediation.
• Assist the Vulnerability Management Team lead with providing metrics and KPIs.

Benefits

• Health, life, disability, financial, and retirement benefits.
• Paid leave, professional development, tuition assistance.
• Work-life programs and dependent care.
• Recognition awards program for exceptional performance.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Professional, Scientific, and Technical Services
• Education Level: Bachelor's degree