System Vulnerability Analyst, Level 3

Independent Software•Columbia, MD

12d

About The Position

As a System Vulnerability Analyst, Level 3 at Independent Software, you will identify, analyze, and help mitigate vulnerabilities across complex systems and network environments. You will conduct security assessments, analyze network activity, identify indicators of compromise, and develop assessment and mitigation reports supporting mission-critical operations.

Requirements

Experience conducting vulnerability assessments and developing mitigation reports
Experience with vulnerability analysis, penetration testing, and/or computer forensics
Experience with network analysis and network anomaly detection
Ability to analyze network and security data to identify malicious or unauthorized activity
Familiarity with IOCs, MITRE ATT&CK, and NIST/ISO 27001
Bachelor's degree plus eight (8) years of relevant experience; OR Master's degree plus six (6) years of relevant experience; OR Doctoral degree plus four (4) years of relevant experience; OR Associate's degree plus ten (10) years of relevant experience may be considered for individuals with in-depth experience clearly related to the position
Degree must be in Computer Science or a related field, such as Engineering, Mathematics, Computer Forensics, Cyber Security, Information Technology, Information Assurance, or Information Security.
Relevant experience must include vulnerability analysis, penetration testing, and/or computer forensics.
Qualifying military cyber training may count toward the experience requirement.
Must possess an active TS SCI with appropriate Polygraph to be considered for this role

Nice To Haves

Zero Trust experience related to CNE, CNO, network infrastructure, architecture, or hardening is a plus
Malware analysis and penetration testing experience are a plus
Certifications such as OSCP, GRTP, CRTE, CRTO, or PenTest+ are a plus

Responsibilities

Conduct vulnerability assessments and develop mitigation reports
Perform vulnerability analysis, penetration testing, and/or computer forensic activities
Analyze network activity to identify malicious, anomalous, or unauthorized behavior
Analyze data from multiple network and security sources
Identify and analyze Indicators of Compromise (IOCs)
Apply MITRE ATT&CK and NIST/ISO 27001 concepts during security analysis
Document assessment findings, vulnerabilities, and recommended mitigations
Support periodic OCONUS travel as required