System Vulnerability Analyst 3

GRVTY • Fort Meade, MD

5d • $131,000 - $161,000

About The Position

GRVTY is seeking experienced System Vulnerability Analysts to identify vulnerabilities and attacks related to the design and operation of systems, including hardware, software, personnel, procedures, logistics, and physical security. The role connects vulnerabilities and attacks to their effects on the operations and missions supported by those systems.

The analyst compares system attack techniques and develops operationally effective countermeasures. The role also produces formal and informal reports, briefings, and perspectives on actual and potential attacks against systems or missions. Responsibilities include exploiting captured media and investigating computer security incidents to derive useful intelligence or enable mitigation of network vulnerabilities. OCONUS travel is required.

Candidates must have Blue Team, Purple Team, or Defensive Cyber Operations (DCO) experience and be comfortable analyzing logs, endpoint detection and response (EDR), networks, network anomalies, indicators of compromise (IOCs), and the MITRE ATT&CK framework and NIST CSF policy. The analyst must be able to analyze data from various sources to discover malicious or unauthorized activity. Assessment experience is preferred. An Information Assurance certification may be required.

Requirements

• Active TS/SCI clearance with polygraph.
• A doctoral degree with 4 years of relevant experience, a master's degree with 6 years, a bachelor's degree with 8 years, or an associate degree with 10 years.
• Degree in Computer Science or a related field, such as General Engineering, Computer Engineering, Systems Engineering, Mathematics, Computer Forensics, Cyber Security, Information Technology, Information Assurance, or Information Security.
• Relevant experience in the design or development of computer or information systems, programming, computer/network security, vulnerability analysis, penetration testing, computer forensics, and/or systems engineering.
• Blue Team, Purple Team, or Defensive Cyber Operations (DCO) focused experience.
• Comfort with log analysis, endpoint detection and response (EDR), network analysis, network anomaly detection, IOCs, the MITRE ATT&CK framework, and NIST CSF policy.
• Ability to analyze data collected from various sources to discover malicious or unauthorized activity.
• Ability to travel OCONUS.
• Information Assurance certification may be required.

Nice To Haves

• Experience conducting assessments.

Responsibilities

• Identify system vulnerabilities and attacks across hardware, software, personnel, procedures, logistics, and physical security, and relate them to effects on supported operations and missions.
• Compare and contrast system attack techniques and develop operationally effective countermeasures.
• Produce formal and informal reports, briefings, and perspectives on actual and potential attacks against systems or missions.
• Exploit captured media and investigate computer security incidents to derive useful intelligence and/or enable mitigation of network vulnerabilities.
• Analyze data from various sources to discover malicious or unauthorized activity.

Benefits

• Medical, dental, and vision coverage
• Health Savings Account with company contribution
• Annual paid time off and paid holidays
• Paid parental leave
• 401(k) with company match
• Training and development opportunities
• Award programs
• Company-sponsored events
• Healthcare, financial wellness, retirement planning, family assistance, continued education, and paid time off

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Associate degree