Culnerability Management / Cyber Operations Analyst

ASM Research•Remote,

About The Position

Creates cyber-intelligence tools and methods and performs research and analysis to mitigate and eliminate data and cybersecurity risks. Designs and develops acceptance criteria for cybersecurity architecture. The role monitors systems and network activity, investigates security incidents, conducts vulnerability assessments, coordinates remediation, and supports threat analysis and digital forensics. It also supports cyber initiatives and requirements involving audit logging, zero trust architecture, encryption, and related areas; documents security events and recommends upgrades to management; and creates security standards and best practices for employees. The position periodically reviews system audits and monitors corrective actions through closure. It coordinates vulnerability reporting and remediation with Infrastructure and Application Teams, validates remediation and closure, documents false positives, and manages risk acceptances. Physical requirements are described as representative of those needed to perform the job’s primary functions; reasonable accommodations may be made for qualified individuals with disabilities.

Requirements

Bachelor’s degree in Computer Science or a related field, or equivalent experience.
5–10 years of experience in systems security.
Security certifications such as Security+, CEH, CISSP, or other application-vendor certifications.
Understanding of network protocols, Windows and Linux operating systems, and security tools such as SIEM.
Ability to review complex data logs and trace the blast radius of a security threat.
Scripting skills to integrate with security tools, dashboard governance, policy processes, and documentation.
Knowledge of Federal Cyber Security policy and guidance, including OMB, Executive Orders, and NIST 800 Series.
Familiarity with Security Center Nessus scanners.
Excellent attention to detail.
Ability to balance multiple tasks simultaneously.
Advanced knowledge of encryption, vulnerability assessment, penetration testing, cyber forensics, intrusion detection, incident response, and remediation.

Responsibilities

Create cyber-intelligence tools and methods and conduct research and analysis to mitigate and eliminate data and cybersecurity risks.
Design and develop acceptance criteria for cybersecurity architecture.
Periodically review each system’s audits and monitor corrective actions until all actions are closed.
Run vulnerability scans; analyze and validate vulnerabilities; prioritize risks according to BOD guidance; coordinate remediation with Infrastructure and Application Teams; verify remediation and closure; document false positives and manage risk acceptances; and coordinate vulnerability reporting.
Monitor network traffic, system and audit logs, and security alerts for suspicious activity.
Investigate suspected and confirmed security breaches, determine root causes, and stop active attacks.
Support threat analysis and digital forensic activities.
Support cyber initiatives and requirements related to audit logging, zero trust architecture, encryption, and related areas.
Document security events, write incident reports, and recommend upgrades to management.
Create security standards and best practices for employees.
Explain technical risks and security guidelines clearly to non-technical staff and management.
Troubleshoot quickly when a breach or system failure occurs.