Enterprise Vulnerability Assessment Program (EVAP)

ECS Tech Inc•Washington, DC

7d•$150,000 - $190,000•Onsite

About The Position

In support of a premier Law Enforcement agency, ECS is seeking an Enterprise Vulnerability Assessment Program (EVAP) professional to work in our Washington, DC office. The role involves performing unbiased, comprehensive assessments that produce actionable security recommendations tailored to the assessed environment, including vulnerability assessment and vulnerability management. This is an expansion of an industry-leading, high-impact program.

Requirements

Ability to conduct Vulnerability Assessments using industry tools - NESSUS, Tenable, etc.
Experience scanning Windows, RHEL and Centos Operating Systems.
Intermediate to advanced knowledge of the following platforms in an enterprise environment: Windows and RHEL, routing, switching, IDS, IPS, Firewalls.
An understanding of mapping and scanning applications and systems, including port scanning, identifying services and configurations, application flow charting, and session analysis.

Nice To Haves

Experience with Tenable (Tenable.io or Tenable.sc) in an enterprise environment highly preferred.
Experience in vulnerability management strategies, standards, procedures and technologies across infrastructure and application-level vulnerabilities.
Experience scanning Virtual environments to include VMware vSphere infrastructures, Network devices, Databases (Oracle, MSSQL, MySql, Postgres), and websites web with tenable.sc

Responsibilities

Perform unbiased comprehensive assessments that produce actionable security recommendations tailored to the assessed environment.
Conduct vulnerability assessment and vulnerability management.
Scan Windows, RHEL and Centos Operating Systems and troubleshoot scans.
Communicate daily with customers describing the results of scans.
Scan Virtual environments to include VMware vSphere infrastructures, Network devices, Databases (Oracle, MSSQL, MySql, Postgres), and websites web with tenable.sc.
Map and scan applications and systems, including port scanning, identifying services and configurations, application flow charting, and session analysis.