Vulnerability Assessment Analyst

ENSCO, Inc.•Colorado Springs, CO

7h•Onsite

About The Position

The Vulnerability Assessment Analyst (VAA) plays a critical role in ensuring the operational cybersecurity posture of a specified USSF mission system platform. This position is responsible for assessing system and network vulnerabilities, enforcing cybersecurity policies, and supporting the continuous monitoring and protection of sensitive mission systems. The VAA ensures all security controls, configurations, and procedures are properly implemented and documented to maintain compliance with DoW, JSIG, and Air Force cybersecurity standards.

Requirements

Bachelor's or equivalent with 5 years of specific experience supporting DoW Cyber/ Information Systems Security
Required certification: Sec+ or equivalent (CySA+, GICSP, GSEC, CND, SSCP, CGRC)
Demonstrated understanding and experience with DoW Cybersecurity policy, Assured Compliance Assessment Solution (ACAS), eMASS, eMASSter, STIG Viewer, Evaluate-STIG, CVSS 3.1, or equivalent
Understanding of the system certification process
Experience with information assurance risk assessments
Understanding of information security principles, DoW STIGs and A&A processes for systems
Experience with continuous monitoring dashboards, e.g., Splunk, ArcSight, LogRhythm or equivalent
Experience performing Risk Management Framework tasks in classified environments
MUST HAVE A CURRENT TOP SECRET/SCI ELIGIBLE SECURITY CLEARANCE, FOR WHICH YOU MUST BE A U.S. CITIZEN. YOU WILL NOT BE CONSIDERED FOR THIS POSITION IF YOU DO NOT MEET

Nice To Haves

MS in Computer Science, Cyber Security, Information Technology, Software Engineering, Information Systems, or Computer Engineering degree
Experience with the following tools: Jira, Confluence, Mattermost
Evaluating security vulnerabilities and mitigation strategies for networked and non-networked systems
Experience performing cybersecurity within an Agile workflow
Strong written and verbal communication skills
Strong problem-solving skills.

Responsibilities

Assessing system and network vulnerabilities
Enforcing cybersecurity policies
Supporting the continuous monitoring and protection of sensitive mission systems
Ensuring all security controls, configurations, and procedures are properly implemented and documented to maintain compliance with DoW, JSIG, and Air Force cybersecurity standards