Vulnerability Assessment Analyst

ENSCO•Colorado Springs, CO

1d•Onsite

About The Position

The Vulnerability Assessment Analyst (VAA) plays a critical role in ensuring the operational cybersecurity posture of a specified USSF mission system platform. This position is responsible for assessing system and network vulnerabilities, enforcing cybersecurity policies, and supporting the continuous monitoring and protection of sensitive mission systems. The VAA ensures all security controls, configurations, and procedures are properly implemented and documented to maintain compliance with DoW, JSIG, and Air Force cybersecurity standards.

Requirements

Bachelor's or equivalent with 5 years of specific experience supporting DoW Cyber/ Information Systems Security
Sec+ or equivalent (CySA+, GICSP, GSEC, CND, SSCP, CGRC) certification
Demonstrated understanding and experience with DoW Cybersecurity policy, Assured Compliance Assessment Solution (ACAS), eMASS, eMASSter, STIG Viewer, Evaluate-STIG, CVSS 3.1, or equivalent
Understanding of the system certification process
Experience with information assurance risk assessments
Understanding of information security principles, DoW STIGs and A&A processes for systems
Experience with continuous monitoring dashboards, e.g., Splunk, ArcSight, LogRhythm or equivalent
MUST HAVE A CURRENT TOP SECRET/SCI ELIGIBLE SECURITY CLEARANCE, FOR WHICH YOU MUST BE A U.S. CITIZEN.

Nice To Haves

MS in Computer Science, Cyber Security, Information Technology, Software Engineering, Information Systems, or Computer Engineering degree
Experience with the following tools: Jira, Confluence, Mattermost
Strong written and verbal communication skills
Strong problem-solving skills

Responsibilities

Assessing system and network vulnerabilities
Enforcing cybersecurity policies
Supporting the continuous monitoring and protection of sensitive mission systems
Ensuring all security controls, configurations, and procedures are properly implemented and documented to maintain compliance with DoW, JSIG, and Air Force cybersecurity standards
Performing Risk Management Framework tasks in classified environments
Evaluating security vulnerabilities and mitigation strategies for networked and non-networked systems
Performing cybersecurity within an Agile workflow