Information Security Analyst

AnaVation•Reston, VA

22h

About The Position

AnaVation is seeking high-level IT Professionals to provide ACAS/HBSS System Administration to join our team and support our mission critical customer in Reston, VA. As our Information Security Analyst, you will perform various Vulnerability Management duties including ACAS/Nessus vulnerability and scanning support, the tracking and dissemination of vulnerability assessments, and the identification and reporting of network and system vulnerabilities, security events, and adverse cyber related activity identified through indicators. The Information Security Analyst will manage all aspects of infrastructure systems used to manage CND-SP networks & resources and will assess threats to the environment. Responsibilities also include patch repository maintenance, supporting and performing inspections to ensure compliance to DoD 8530 Standards, and participating in risk assessment during the C&A (certification and accreditation) process, as well as, supporting security certification tests and evaluation of assets

Requirements

Clearance: Active TS/SCI Clearance
Education & Years of Experience: Bachelorâs degree and 8 years of experience related to specific functional area.
Certifications: Currently hold, or be able to attain a CompTIA CYSA+ or equivalent certification
Experience with vulnerability scanning tools to include and understanding of Vulnerability Management System and Continuous Monitoring and Risk Scoring.
Provide technical support to customers involving a wide range of software, hardware, and DoD specific applications with respect to the ACAS solution
Supporting vulnerability management program requirements including maintaining patch repository, issuing alerts and bulletins, and tracking compliance
Ability to analyze the customer's needs and identify security requirements / solutions.
Reviewing reporting, automation, and visualization systems to provide situational awareness and making recommendations to improve vulnerability management capabilities
Coordinating access to systems and approvals for scanning activities
Conducting ad hoc testing to assist with development activities or vulnerability remediation
Reviewing and testing system security controls (managerial, operational, and technical) to determine adequacy against federal requirements (e.g., NIST SP 800-53) and mission context
Provide advanced troubleshooting and resolution of security products such as HBSS, Nessus Agent (ACAS)
Creating, maintaining, and updating knowledge management and technical documentation of operational processes and findings
Demonstrated initiative (i.e. initiate appropriate action without being directed) and ability to work independently.
Providing input on adequacy of security designs and architectures

Nice To Haves

Security certifications: CCNA Security, SSCP, or equivalent certification
Cloud certifications

Responsibilities

ACAS/Nessus vulnerability and scanning support
Tracking and dissemination of vulnerability assessments
Identification and reporting of network and system vulnerabilities, security events, and adverse cyber related activity identified through indicators
Manage all aspects of infrastructure systems used to manage CND-SP networks & resources and will assess threats to the environment
Patch repository maintenance
Supporting and performing inspections to ensure compliance to DoD 8530 Standards
Participating in risk assessment during the C&A (certification and accreditation) process
Supporting security certification tests and evaluation of assets