Vulnerability Management Analyst (OS/Infrastructure)
About The Position
OCH Technologies is seeking a Vulnerability Management Analyst (OS/Infrastructure) to support a Defense Logistics Agency program. The position supports a proposal effort and is contingent upon award, customer approval, and successful onboarding requirements. Work is on-site in Columbus, Ohio; Battle Creek, Michigan; or Fort Belvoir, Virginia. The analyst supports vulnerability management for assigned information systems and computer networks. The role involves identifying and assessing vulnerabilities, characterizing risk, coordinating risk-based remediation, recommending mitigation actions, and verifying that remediation and security settings comply with applicable DLA and Department of Defense policies, including DISA Security Technical Implementation Guides (STIGs) and the DoD Information Assurance Vulnerability Management (IAVM) program. The analyst tracks and reports security and compliance issues. Responsibilities may evolve to support team and organizational goals while remaining within the overall scope of the role.
Requirements
- Bachelor’s degree (BS or BA) in a technical discipline from an accredited university.
- Five years of relevant experience.
- Hands-on experience working with vulnerability scanners.
- Understanding of vulnerabilities and remediation techniques.
- Must possess an active DoD Secret security clearance.
- Must be eligible for an IT-II (Non-Critical Sensitive) security designation or Tier 3 (T3) investigation upon assignment.
Responsibilities
- Serve as vulnerability management analyst for assigned information systems and computer networks.
- Analyze vulnerabilities and characterize risk to networks, operating systems, applications, databases, and other information system components.
- Engage stakeholders and mission partners to facilitate vulnerability discovery through manual review and/or vulnerability scanners.
- Coordinate remediation efforts and prioritize them based on risk.
- Recommend actions to remediate vulnerabilities and mitigate risks.
- Ensure implementation of appropriate security settings, including those required by DISA Security Technical Implementation Guides (STIGs).
- Support and ensure compliance with the DoD Information Assurance Vulnerability Management (IAVM) program.
- Track and report security and compliance issues.
- Validate remedial actions and ensure compliance with DLA and DoD information security policy.
Benefits
- Paid time off and holidays
- Medical insurance
- Dental insurance
- Vision insurance
- Paid parental leave
- Employer-paid short-term disability insurance
- Employer-paid long-term disability insurance
- Employer-paid life insurance
- 401(k)
- Additional voluntary life insurance
- Tuition reimbursement
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
