Enterprise Cybersecurity Vulnerability Analyst, Senior

Booz Allen Hamilton•McLean, VA

20h•Remote

About The Position

Support Booz Allen Hamilton's internal Enterprise Cybersecurity team by utilizing enterprise-level vulnerability scanning and assessment tools to identify internally and externally facing vulnerabilities and security misconfigurations across the Booz Allen network. Validate that appropriate patches and mitigations are in place within defined SLA levels. Conduct analysis and serve as a vulnerability management resource supporting the company's client-facing and internal support teams. Stay current with emerging threats within the industry and collaborate with other cybersecurity teams in a Cyber Fusion Center (CFC) environment to understand the impact of security threats and possible impacts to the global enterprise. Conduct direct outreach to affected environments to ensure rapid remediation. As needed, assist the Vulnerability Management Team lead with providing metrics and KPIs to other operational teams and senior leadership.

Requirements

4+ years of experience in a vulnerability analyst role including identifying and remediating cloud vulnerabilities and misconfigurations
2+ years of experience with Windows and UNIX system administration
Experience managing, deploying, and securing resources within AWS, Azure, or Google Cloud Platform
Experience with Tenable Cloud Security and Tenable Security Center
Knowledge of basic networking protocols, including TCP, IP, UDP, HTTP, HTTPS, SSH, and DNS
Ability to communicate effectively with clients, supporting teams, and management
Ability to obtain a Secret clearance
Associate's degree and 7+ years of experience supporting IT projects and activities, Bachelor's degree and 5+ years of experience supporting IT projects and activities, Master's degree and 3+ years of experience supporting IT projects and activities, or 10+ years of experience supporting IT projects and activities in lieu of a degree

Nice To Haves

Experience deploying, managing, and administering vulnerability scanning software such as Tenable Security Center or multiple Nessus scanners within a medium or large-scale enterprise including Qualys
Experience with Splunk, including building search queries
Knowledge of vulnerabilities, cyber threats, and information security tools
Knowledge of open security standards and projects, including OWASP
Possession of excellent verbal and written communication skills
Bachelor's degree in Computer Science
GSEC, GMON, GCIA, or Security+ Certification

Responsibilities

Utilize enterprise-level vulnerability scanning and assessment tools to identify internally and externally facing vulnerabilities and security misconfigurations across the Booz Allen network.
Validate that appropriate patches and mitigations are in place within defined SLA levels.
Conduct analysis and serve as a vulnerability management resource supporting the company's client-facing and internal support teams.
Stay current with emerging threats within the industry and collaborate with other cybersecurity teams in a Cyber Fusion Center (CFC) environment to understand the impact of security threats and possible impacts to the global enterprise.
Conduct direct outreach to affected environments to ensure rapid remediation.
Assist the Vulnerability Management Team lead with providing metrics and KPIs to other operational teams and senior leadership.