Vulnerability Assessment Analyst Jr

ASM Research•Ashburn, VA

2d•Onsite

About The Position

This role provides Vulnerability Assessment (VA) support to agency information systems. Key responsibilities include assisting the Government in managing Enterprise Information System Vulnerability Management (ISVM) compliance validation, briefing leadership on vulnerabilities and security policies, and performing regularly scheduled vulnerability assessments. The analyst will also manage, customize, and maintain scan policies, zones, and repositories, perform scan functions, review scan results, and create custom scan reports. Coordination with system ISSOs and Government Task Monitors is crucial for scheduling and ensuring smooth operations. The role involves maintaining a repository of VA application issues and reporting them to the appropriate teams. Travel to agency facilities for onsite security assessments may be requested.

Requirements

Bachelor’s Degree in Computer Science or a related field or equivalent experience.
Minimum 3 years of professional experience in information assurance, cybersecurity, risk management, or compliance; to include experience with IT vulnerability assessments/management.
US Citizenship / No Dual

Nice To Haves

Familiarity with Zero Trust Architecture Implementation and best practices.

Responsibilities

Assist the Government in managing Enterprise Information System Vulnerability Management (ISVM) compliance validation.
Assist the Government in briefing leadership on current and future vulnerabilities, security policies and industry standards.
Assist the Government in briefing leadership on most impactful vulnerabilities, configurations, and penetration testing efforts.
Assist the Government in creating and managing all scans in accordance with the VAT scan standardization documentation.
Assist the Government in performing regularly scheduled vulnerability assessments using a master schedule as directed.
Assist the Government in managing, customizing, and maintaining scan policies, zones, and repositories as they relate to the agency network.
Assist the Government in performing scan functions and review scan results to ensure accurate findings.
Assist the Government in creating and customizing scan reports and data feeds to be imported / integrated into third party assessment tools.
Support the coordination of the VA scanning and testing in advance with the system ISSO and the Government Task Monitor (TM) to assure coordination with network maintenance, availability, and operations.
Coordinate with system owner / ISSM/ ISSO to make any necessary changes to the schedule.
Assist the Government in maintaining a repository of VA application issues and report application issues to Government VAT Team Lead and SSD Director.
Travel to be physically on location to perform onsite security assessments of agency facilities, systems, and applications as requested.