Lead Vulnerability Assessment Analyst

INFINITY SYSTEMS ENGINEERING LLC • Albuquerque, NM

3d

About The Position

The Lead Vulnerability Assessment Analyst (VAA) is responsible for leading all VAAs to ensure the appropriate operational security posture is maintained for the R2C2 platform. The Lead VAA is responsible for implementing and enforcing all DoW cybersecurity policies, procedures, and countermeasures.

Requirements

• Experience should include leading technical and nontechnical system risk and vulnerability assessments, preparing and briefing audit reports that identify technical and procedural findings and recommended remediation strategies/solutions, and completion of cybersecurity policies and configuration evaluations for compliance with regulations and organizational directives.
• Required to possess an active and current Security+ Continuous Education Certification or equivalent
• Must possess a Top-Secret clearance based on a Special Background Investigation and be eligible for SCI and SAP access.

Nice To Haves

• Master’s degree in Cybersecurity, Systems Engineering, or related technical field preferred.

Responsibilities

• Complete and maintain required cybersecurity certification in accordance with AFMAN 17-1305
• Ensure all users have the requisite security clearances and need-to-know, complete annual cybersecurity training, and are aware of their responsibilities before being granted system access in accordance with AFMAN 17-1301
• Maintain all authorized user access control documentation IAW the applicable Air Force Records Information Management System
• Ensure software, hardware, and firmware comply with appropriate security configuration guidelines (e.g., security technical implementation guides and security requirement guides)
• Ensure proper configuration management procedures are followed prior to implementation
• Coordinate changes or modifications with the system-level ISSM, SCA, and the AO
• Initiate protective or corrective measures, in coordination with the ISSM, when a security incident or vulnerability is discovered
• Report security incidents or vulnerabilities to the ISSM in accordance with AFI 17-203, Cyber Incident Handling
• Initiate exceptions, deviations, or waivers to cybersecurity requirements
• Execute and document continuous monitoring processes
• Oversee maintenance of ATO BoE (e.g., SSP, POA&M) 4.4.7.2.3.2

Benefits

• Great Company Culture. Infinity firmly believes that our success is due to the happiness and personal satisfaction of our employees.
• Health Benefits. 100% Company Paid Medical and Dental for you AND your family.
• Work that Stays at Work. Genuine work/life balance and flexibility. We know our employees have lives outside of work and we support you in living them!
• Rest and Relaxation. Three weeks' Vacation – Front Loaded on the day you start, and we pay for you to go on our company reward trip (ask us about this!)
• Health and Wellness. We offer 48 hours of sick leave, in addition to your Vacation, as well as Flex-Spending options (Medical and Dependent Care)
• Prepare for the Future. 401(k) company contribution, with free professional financial planning advisors
• Education and Professional Training Reimbursement. We support our employees career aspirations and growth!
• Profit Sharing Plan. Infinity’s success is due to our employees. Eligible employees are able to participate in our Profit-Sharing Plan.
• And more!

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level