Vulnerability Assessment Analyst

4 weeks ago

Springfield, United States Calibre Inc Full time

CALIBRE Systems Inc., an employee-owned Management Consulting and Digital Transformation Company is seeking a Vulnerability Assessment Analyst (Mid-level) that will perform assessments of systems and networks within a Government enclave and identify where those systems/networks deviate from acceptable configurations, enclave policy, or local policy. The analyst will measure the effectiveness of defense-in-depth architecture against known vulnerabilities.

The Vulnerability Assessment Analyst’s responsibilities include, but are not limited to, the following:

  • Analyze the organization's cyber defense policies and configurations and evaluate compliance with regulations and organizational directives.
  • Conduct and/or support authorized penetration testing on enterprise network assets.
  • Maintain deployable cyber defense audit toolkit (e.g., specialized cyber defense software and hardware) to support cyber defense audit missions.
  • Maintain knowledge of applicable cyber defense policies, regulations, and compliance documents specifically related to cyber defense auditing.
  • Prepare audit reports that identify technical and procedural findings and provide recommended remediation strategies/solutions.
  • Conduct required reviews as appropriate within environment (e.g., Technical Surveillance, Countermeasure Reviews [TSCM], TEMPEST countermeasure reviews).
  • Perform technical (evaluation of technology) and nontechnical (evaluation of people and operations) risk and vulnerability assessments of relevant technology focus areas (e.g., local computing environment, network and infrastructure, enclave boundary, supporting infrastructure, and applications).
  • Make recommendations regarding the selection of cost-effective security controls to mitigate risk (e.g., protection of information systems and processes).

Required Skills

  • Conducting vulnerability scans and recognizing vulnerabilities in security systems.
  • Assessing the robustness of security systems and designs.
  • Detecting host and network-based intrusions via intrusion detection technologies (e.g., Snort).
  • Mimicking threat behaviors.
  • Use of penetration testing tools and techniques. (e.g., Burp suite, Metasploit, Wireshark, Kali Linux).
  • Use of social engineering techniques. (e.g., phishing, baiting, tailgating, etc.).
  • Using network analysis tools to identify vulnerabilities. (e.g., Nessus, Verodin).
  • Reviewing logs to identify evidence of past intrusions.
  • Conducting application vulnerability assessments.
  • Performing impact/risk assessments.
  • Developing insights about the context of an organization’s threat environment
  • Applying cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).

Desired skills: the Vulnerability Assessment Analyst should have the ability to:

  • Identify systemic security issues based on the analysis of vulnerability and configuration data.
  • Apply programming language structures (e.g., source code review) and logic.
  • Share meaningful insights about the context of an organization’s threat environment that improve its risk management posture.
  • Apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).

Required Experience

  • US citizen
  • Active Top Secret/Sensitive Compartmented Information (TS/SCI) clearance, eligible for Counterintelligence (CI) Polygraph.
  • IAT Level 2 certification (e.g., CySA+, GSEC, Security+ CE) and two Penetration Testing Certifications (e.g., GPEN, GWAT, GCIH, CEH, GPYC, LPT, CPT).
  • Bachelor’s degree or higher from an accredited college or university in Computer Science, Cyber Security, Information Technology, Software Engineering, Information Systems, or Computer Engineering degree; or a degree in a Mathematics or Engineering field.
  • Possible travel within the Continental United States (CONUS) and Outside CONUS (OCONUS).

Qualifications:

  • Conducting vulnerability scans and recognizing vulnerabilities in security systems.
  • Assessing the robustness of security systems and designs.
  • Detecting host and network-based intrusions via intrusion detection technologies (e.g., Snort).
  • Mimicking threat behaviors.
  • Use of penetration testing tools and techniques. (e.g., Burp suite, Metasploit, Wireshark, Kali Linux).
  • Use of social engineering techniques. (e.g., phishing, baiting, tailgating, etc.).
  • Using network analysis tools to identify vulnerabilities. (e.g., Nessus, Verodin).
  • Reviewing logs to identify evidence of past intrusions.
  • Conducting application vulnerability assessments.
  • Performing impact/risk assessments.
  • Developing insights about the context of an organization’s threat environment
  • Applying cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).

Desired skills: the Vulnerability Assessment Analyst should have the ability to:

  • Identify systemic security issues based on the analysis of vulnerability and configuration data.
  • Apply programming language structures (e.g., source code review) and logic.
  • Share meaningful insights about the context of an organization’s threat environment that improve its risk management posture.
  • Apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).

  • Vulnerability Assessment Analyst

    2 weeks ago

    Springfield, United States CALIBRE Systems Full time

    Job Description CALIBRE Systems Inc., an employee-owned Management Consulting and Digital Transformation Company is seeking a Vulnerability Assessment Analyst (Mid-level) that will perform assessments of systems and networks within a Government enclave and identify where those systems/networks deviate from acceptable configurations, enclave policy, or local...

  • Vulnerability Assessment Analyst

    3 days ago

    Springfield, United States Amyx Full time

    Overview Amyx is seeking to hire a Vulnerability Assessment Analyst-Intermediate to support our Cybersecurity Division/NGA Defender in the NCE-Springfield, VA. area. Performs assessments of systems and networks within the NE or enclave and identifies where those systems/networks deviate from acceptable configurations, enclave policy, or local policy....

  • Vulnerability Assessment Analyst

    1 month ago

    Springfield, United States CALIBRE Full time

    CALIBRE Systems Inc., an employee-owned Management Consulting and Digital Transformation Company is seeking a Vulnerability Assessment Analyst (Mid-level) that will perform assessments of systems and networks within a Government enclave and identify where those systems/networks deviate from acceptable configurations, enclave policy, or local policy. The...

  • Vulnerability Assessment Analyst

    4 days ago

    Springfield, United States Elite Technical's Customer Full time

    Vulnerability Assessment Analyst (Cyber)Our client, a federal contractor is seeking a Vulnerability Assessment Analyst to perform assessments of systems and networks within the network environment or enclave and identifying where those systems/networks deviate from acceptable configurations, enclave policy, or local policy.The position is 100% onsite at the...

  • Vulnerability Assessment Analyst

    23 hours ago

    Springfield, United States Elite Technical's Customer Full time

    Vulnerability Assessment Analyst (Cyber)Our client, a federal contractor is seeking a Vulnerability Assessment Analyst to perform assessments of systems and networks within the network environment or enclave and identifying where those systems/networks deviate from acceptable configurations, enclave policy, or local policy.The position is 100% onsite at the...

  • Vulnerability Assessment Analyst

    5 days ago

    Springfield, United States Elite Technical's Customer Full time

    Vulnerability Assessment Analyst (Cyber)Our client, a federal contractor is seeking a Vulnerability Assessment Analyst to perform assessments of systems and networks within the network environment or enclave and identifying where those systems/networks deviate from acceptable configurations, enclave policy, or local policy.The position is 100% onsite at the...

  • Vulnerability Assesment Specialist

    3 days ago

    Springfield, United States MKS2 Technologies Full time

    Job DescriptionJob DescriptionMKS2 Technologies, LLC, an award-winning high growth small business, creates innovative and customer-centric technology solutions in the areas of Cyber Security, Instructional Design and Training, Software Engineering and IT Support Services to improve the security and well-being of our clients. Our commitment to excellence and...

  • Computer Network Defense

    2 weeks ago

    Springfield, United States Vectrus Full time

    Working across the globe, V 2 X builds smart solutions designed to integrate physical and digital infrastructure from base to battlefield. We bring 120 years of successful mission support to improve security, streamline logistics, and enhance readine Assessment, Vulnerability, Network, Computer, Specialist, Cybersecurity Analyst, Technology

  • End Point Vulnerability Specialist

    2 weeks ago

    Springfield, United States Forvis Full time

    Description & Requirements It is the responsibility of the Endpoint team to assist the IT Manager End-User Computing in the planning, testing, installation, and management of end-user computing devices (laptop, desktop, mobile) and the installation of applications on those devices. Endpoint Vulnerability Specialists are members of that team and are...

  • CND Specialist with Security Clearance

    1 month ago

    Springfield, United States NewGen Technologies, Inc. Full time

    NewGen is seeking a Computer Network Defense Vulnerability Assessment Specialist with the following background. Responsibilities- Developing and executing the organization's continuous vulnerability assessment strategy.- Measuring the effectiveness of defense-in-depth mechanisms against vulnerabilities and developing recommendations to remediate systemic...

  • Cyber Security Analyst

    3 days ago

    Springfield, United States McIntire Solutions Full time

    **Title**: Cyber Security Analyst **Location**: Springfield, VA McIntire Solutions is seeking a Cyber Security Analyst to support our Springfield Customer. **Responsibilities include, but are not limited to**: - Support cyber operation activities to maintain and share timely situational awareness of: enterprise network topology active threats, vectors,...

  • 3rd Party Risk Management Cyber Security Purple Team Analyst

    4 weeks ago

    Springfield, United States Hybrid Pathways Full time

    Job DescriptionJob DescriptionAbout the opportunity:Hybrid Pathways is seeking a highly skilled and motivated Third-Party Risk Management Cyber Security Purple Team Analyst to join a dynamic team. As a Third-Party Risk Management Purple Team Analyst, you will play a crucial role in enhancing the customer’s organization's overall cybersecurity posture...

  • Cyber Security Analyst

    9 hours ago

    Springfield, United States McIntire Solutions, LLC Full time

    Title: Cyber Security Analyst Location: Springfield, VA McIntire Solutions is seeking a Cyber Security Analyst to support our Springfield Customer. Responsibilities include, but are not limited to: Support cyber operation activities to maintain and share timely situational awareness of: enterprise network topology active threats, vectors, and actions that...

  • Cyber Security Analyst

    3 days ago

    Springfield, United States McIntire Solutions Full time

    Job DescriptionJob DescriptionTitle: Cyber Security AnalystLocation:  Springfield, VAMcIntire Solutions is seeking a Cyber Security Analyst to support our Springfield Customer. Responsibilities include, but are not limited to:Provides detection, identification, and reporting of possible cyber-attacks/intrusions, anomalous activities, and misuse...

  • Cyber Security Analyst

    3 days ago

    Springfield, United States McIntire Solutions Full time

    Job DescriptionJob DescriptionTitle: Cyber Security AnalystLocation: Springfield, VAMcIntire Solutions is seeking a Cyber Security Analyst to support our Springfield Customer. Responsibilities include, but are not limited to:Support cyber operation activities to maintain and share timely situational awareness of: enterprise network topology active threats,...

  • Cybers Security Engineer/Analyst

    1 month ago

    Springfield, United States Zachary Piper Solutions Full time

    To serve the DoD Joint Operations Center (DJOC) at Ft. Meade, Maryland, Zachary Piper Solutions is looking for a Cyber Operations Analyst. We are looking for somebody who can provide situational awareness of the operational environment by utilizing operational data and cyber threat intelligence. To help protect the environment, the team is in need of...

  • Cyber Security Analyst, Principal with Security Clearance

    1 month ago

    Springfield, United States Dexian Signature Federal Full time

    Cyber Security Analyst, PrincipalClearance Required: TS/SCI with CI PolygraphLocation: Springfield, VA Signature Federal Systems is seeking a motivated, career and customer-oriented Cyber Security Analyst, Principal, to join our team in the Springfield, Virginia area. In this position you’ll help protect our national security while working on innovative...

  • All-source Intelligence Analyst

    2 months ago

    Springfield, United States Eiden Systems Corporation Full time

    Eiden Systems Corporation is seeking an **All-Source Intelligence Analyst (Level II), with an active TS/SCI **clearance, to support a contract in the National Capital Region. **What you will be doing**: - Provides strategic, operational, and tactical analysis as required based on raw intelligence collected from a variety of information sources. - Applies...

  • Cybersecurity Systems Assessment Engineer

    4 weeks ago

    Springfield, United States Business Integra Full time

    Job DescriptionJob DescriptionScope Of Responsibilities: Direct the actions of RME personnel to coordinate, develop, and evaluate security programs for the organization. Develops and conducts tests of systems to evaluate compliance with specifications and requirements by applying cybersecurity principles and methods for evaluating, verifying, and...

  • Top Secret SCI Information Security Analyst Advisor with Security Clearance

    1 month ago

    Springfield, United States The Computer Merchant, Ltd. Full time

    JOB TITLE: Top Secret SCI Information Security Analyst AdvisorJOB LOCATION: Springfield VAWAGE RANGE*: $75hr to $80hr/ W2 OnlyJOB NUMBER: RQ170126 Duration:1 Year Contract - Could see extensions or turn permMust possess and maintain a Top Secret/SCI Security Clearance. REQUIRED EXPERIENCE:Skills :ACAS, DISA STIG, RMF, Splunk8+ years of IT experience...