Senior Cyber Vulnerability Analyst

Koniag Government Services•Falls Church, VA

About The Position

Koniag IT Systems, a Koniag Government Services company, is seeking a Senior Cyber Vulnerability Analyst with a TS/SCI clearance to support KITS and our government customer in Falls Church, VA. We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more. Essential Functions, Responsibilities & Duties may include, but are not limited to: The incumbent will have a strong background in cyber vulnerability analysis, system architecture reviews, and the RMF framework. The incumbent will also possess the ability to prepare technical briefs and coordinate with senior leaders and stakeholders. The Senior Cyber Vulnerability Analyst will be responsible for providing recommendations for mitigation to protect systems and data from cyber threats. Major Duties and Responsibilities Conduct cyber vulnerability analysis and system architecture reviews to identify and assess potential vulnerabilities in various systems and networks. Manage communication with technical and non-technical personnel of systems under review, such as system stakeholders and cybersecurity teams. Use knowledge of Risk Management Framework (RMF) to map cyber vulnerabilities and mitigations to NIST SP 800-53 controls and ensure compliance with regulatory requirements, best practices, and industry standards. Produce high quality technical and non-technical products, briefings, whitepapers, etc., with emphasis on effective/accurate reporting to improve the security posture of the customer system. Maintain a comprehensive understanding of the cyber threat landscape, situational awareness of emerging threats, zero days, vulnerabilities and other threats against customer systems, networks, and assets including identifying and analyzing cyber threats actors and/or activities.

Requirements

10+ years of experience as a Vulnerability Analyst or similar role, with experience in a defense or government environment preferred.
Expert knowledge of Information Assurance Vulnerability Management (IAVM), to include proficiency with vulnerability scanning tools such as Nessus or similar and correlating cyber vulnerabilities to measurable risk.
Ability to identify indicators of an attack and document preliminary reports for cyber investigative teams, as well as executive-level summary briefings.
Previous experience with associated cyber risk assessment/risk management methodologies-RMF preferred.
Security Pre-Requisite – Must have a CURRENT/ACTIVE TOP SECRET with SCI Eligibility

Nice To Haves

15+ years of experience as a Vulnerability Analyst, with experience in a defense or government environment.
Expert knowledge of Information Assurance Vulnerability Management (IAVM), to include proficiency with vulnerability scanning tools such as Nessus or similar and correlating cyber vulnerabilities to measurable risk.
Must be able to identify indicators of an attack and document preliminary reports for cyber investigative teams, as well as executive-level summary briefings.
Extensive experience with associated cyber risk assessment/risk management methodologies such as RMF.
Security Pre-Requisite – Must have a CURRENT/ACTIVE TOP SECRET with SCI Eligibility

Responsibilities

Conduct cyber vulnerability analysis and system architecture reviews to identify and assess potential vulnerabilities in various systems and networks.
Manage communication with technical and non-technical personnel of systems under review, such as system stakeholders and cybersecurity teams.
Use knowledge of Risk Management Framework (RMF) to map cyber vulnerabilities and mitigations to NIST SP 800-53 controls and ensure compliance with regulatory requirements, best practices, and industry standards.
Produce high quality technical and non-technical products, briefings, whitepapers, etc., with emphasis on effective/accurate reporting to improve the security posture of the customer system.
Maintain a comprehensive understanding of the cyber threat landscape, situational awareness of emerging threats, zero days, vulnerabilities and other threats against customer systems, networks, and assets including identifying and analyzing cyber threats actors and/or activities.