Vulnerability Assessment Analyst

ASM Research•Ashburn, VA

1d•Onsite

About The Position

Creates cyber-intelligence tools / methods and performs research and analysis in order to mitigate and eliminate data and cyber security risks. Develops acceptance criteria for cybersecurity architecture. Provide Vulnerability Assessment (VA) support to agency information systems.

Requirements

Bachelor’s Degree in Computer Science or a related field or equivalent experience.
Minimum 5 years of professional experience in information assurance, cybersecurity, risk management, or compliance; to include experience with IT vulnerability assessments/management.
Candidates must be US citizens (no dual citizens) with the ability to pass a federal background investigation in order to be granted access to sensitive information.

Nice To Haves

Familiarity with Zero Trust Architecture Implementation and best practices.
Must be able to communicate effectively and clearly present technical approaches and findings.
Exercises a limited degree of latitude in determining technical objectives of assignments.
Excellent attention to detail.
Must be able to balance multiple tasks simultaneously.

Responsibilities

Assist the Government in managing Enterprise Information System Vulnerability Management (ISVM) compliance validation.
Assist the Government in briefing leadership on current and future vulnerabilities, security policies and industry standards.
Assist the Government in briefing leadership on most impactful vulnerabilities, configurations, and penetration testing efforts.
Assist the Government in creating and managing all scans in accordance with the VAT scan standardization documentation.
Assist the Government in performing regularly scheduled vulnerability assessments using a master schedule as directed.
Assist the Government in managing, customizing, and maintaining scan policies, zones, and repositories as they relate to the agency network.
Assist the Government in performing scan functions and review scan results to ensure accurate findings.
Assist the Government in creating and customizing scan reports and data feeds to be imported / integrated into third party assessment tools.
Support the coordination of the VA scanning and testing in advance with the system ISSO and the Government Task Monitor (TM) to assure coordination with network maintenance, availability, and operations.
Coordinate with system owner / ISSM/ ISSO to make any necessary changes to the schedule.
Assist the Government in maintaining a repository of VA application issues and report application issues to Government VAT Team Lead and SSD Director.
Travel to be physically on location to perform onsite security assessments of agency facilities, systems, and applications as requested.