Vulnerability Analyst Jobs

About The Position

Requirements

• At least 4 years of experience in SOC analysis, cyber defense, or vulnerability assessment within DoD/Navy environments.
• Advanced knowledge of Splunk, including SPL query language, Enterprise Security, correlation searches, and alerting.
• Hands-on operational experience with Tenable ACAS, including Nessus and SecurityCenter.
• Hands-on operational experience with DoD HBSS/ESS, including Trellix ePO, agent verification, and module status.
• Direct experience uploading and tracking vulnerability data in VRAM and CMRS.
• Foundational understanding of enterprise databases, including SAP HANA and Oracle, and operating system security.
• DoD 8570/8140 CSSP Analyst or IAT II/III baseline certification, such as CySA+, CEH, CASP+ CE, or CISSP.
• Must be a U.S. citizen.
• Must be able to perform repetitive motions with the hands, wrists, and fingers.
• Must be able to engage in and follow audible communications in emergency situations.
• Must be able to sit for prolonged periods at a desk and work on a computer, with or without reasonable accommodation.

Nice To Haves

• Splunk Certified Cybersecurity Defense Analyst or Splunk Core Certified Advanced Power User certification.
• DISA HBSS 201/301 Administrator training or Tenable ACAS certification.
• Prior experience coordinating with NAWC-AD or Navy program office cyber teams.

Responsibilities

• Monitor real-time security alerts from Splunk, Tripwire, and HBSS in accordance with SOPs.
• Triage, analyze, and escalate suspicious events, anomalous behaviors, and security incidents.
• Conduct activity monitoring across Navy ERP databases, operating systems, applications, middleware, and integration layers.
• Develop, refine, and optimize correlation searches within Splunk Enterprise Security.
• Tune detection logic to reduce false positives and improve detection fidelity.
• Design custom Splunk dashboards, scheduled alerts, and compliance-tracking metrics.
• Define data requirements and logging standards for new inbound data sources.
• Schedule, execute, and validate weekly and ad-hoc ACAS (Tenable) vulnerability scans.
• Schedule, execute, and review weekly and ad-hoc Onapsis scans across SAP instances.
• Ensure all Navy ERP assets receive required policy scans.
• Monitor HBSS/ESS agent coverage across endpoints and coordinate with NAWC-AD data center HBSS administrators.
• Export verified ACAS scan results and upload them to VRAM.
• Consolidate vulnerability data and HBSS status metrics for regular submission into CMRS.
• Generate and distribute vulnerability assessment reports to technical subject matter experts.
• Lead or back up weekly vulnerability review meetings with system, database, and platform subject matter experts.
• Track remediation milestones and validate post-remediation re-scans.
• Maintain and update threat response playbooks, scanning schedules, and operational SOPs.