ISSE Vulnerability Assessment Analyst 1, Part-time (AE26091236)

Advantage Engineering & IT Solutions • Annapolis Junction, MD

4d • Onsite

About The Position

AEITS, Inc., a GTSC company, is growing its team! Seeking a Vulnerability Assessment Analyst - Information Systems Security Engineer (ISSE), Level 1. This is a part-time position requiring work on evenings and weekends, and all work is on-site in Annapolis Junction, MD. The role involves developing, maintaining, and enhancing complex software systems based on documented requirements.

Requirements

• Familiarity with DISA STIGs, Tenable Audit files, and / or CIS Benchmarks.
• Hands-on operational experience with enterprise vulnerability management and scanning solutions, such as Tenable.
• Knowledge of system and application security threats and vulnerabilities.
• Working knowledge of networking, Linux/Unix, Windows administration, patch deployment and system configuration.

Nice To Haves

• In-depth knowledge of vulnerability assessment methodologies, tools, and best practices.
• Self-starter, ability to work effectively both independently and as part of a team including the ability and desire to own every aspect of a task from start to finish.
• Strong analytical and problem-solving abilities, with a keen attention to detail.

Responsibilities

• Maintain and optimize the Tenable Security Center infrastructure.
• Conduct regular security patching, assessments and scans on Linux Security Center servers using Tenable Nessus.
• Mitigate STIGS/Vulnerabilities on Tenable Linux Security Center Servers and Windows/Linux Nessus Scanning Servers.
• Install and update Tenable Nessus Software on Linux/Windows Scanning Servers.
• Install and update Tenable Security Center Software on Linux Servers.
• Configure and fine-tune scanning policies and asset lists to ensure thorough vulnerability coverage.
• Keep abreast of the latest Tenable Security Center features and updates.
• Perform regular vulnerability assessments of multiple device types and Operating Systems using Tenable Security Center.
• Utilize Nessus Scanning Tool to identify vulnerabilities across customer assets on a Continuous Monitoring basis.
• Review Nessus/ACAS scan results and provide direction where required.
• Recognizes potential, successful, and unsuccessful scan results for efficiency in reporting compromises thorough reviews and analyses of relevant event detail and summary information.
• Analyze scan results and generate comprehensive vulnerability reports.
• Monitor and track vulnerability remediation progress.
• Collaborate with ISS and other teams to ensure timely vulnerability remediation.
• Communicate effectively with stakeholders about the security posture and potential risks.
• Prepare and deliver clear and concise reports to management and stakeholders.
• Maintain accurate records of security incidents and vulnerabilities.

Benefits

• 401K with employer contribution.
• Five (5) weeks comprehensive annual leave (25 workdays).
• Additional leave can be earned in lieu of overtime.
• 11 Paid Federal Government Holidays.
• Up to $5,000 annually for individually tailored education / training program.
• Life Insurance at 1x annual salary with employee option to purchase additional coverage for self and dependents.
• Short-term and long-term disability.
• Generous portion towards the cost of monthly medical plans for any of the three medical, 1 dental and 1 vision plan provided by CareFirst.
• All employees are eligible to earn generous incentives and performance bonuses.

What This Job Offers

• Job Type: Part-time
• Career Level: Entry Level