Note: The job is a remote job and is open to candidates in USA. Netgate is a minority-owned Virginia-based business specializing in IT infrastructure management for public and commercial sectors. They are seeking a Senior Vulnerability Management Analyst to support cyber security services for a US Government civilian agency, focusing on monitoring vulnerabilities, developing mitigation strategies, and ensuring effective cybersecurity safeguards.
Responsibilities
- Monitoring vulnerability scans and the status of scanning appliances in enterprise datacenters
- Participating in deployment meetings, reviewing network topologies to place scanners in proper areas of networks to gain visibility to assess security posture
- Running scheduled and ad hoc security reports detailing enterprise security posture
- Researching and troubleshooting networking issues and events to find root-cause analysis
- Develops risk-based mitigation strategies for networks, operating systems, and applications
- Conduct continuous monitoring and evaluate the effectiveness of the enterprise's cybersecurity safeguards
- Review security vulnerabilities across a variety of technologies and environments to resolve high risk vulnerabilities to business assets
- Review and define requirements for information security solutions
- Provide recommendations and guidance to the customer enabling program improvements and reducing risk across the enterprise
Skills
- Strong analytical and verbal communication skills
- Demonstrated ability to interact effectively with senior management and leadership
- 7-10 years of successful network and cloud-based troubleshooting experience
- Experience managing a large and complex network
- Maintain knowledge of applicable cyber defense policies, regulations, and compliance documents specifically related to vulnerability management
- Expertise with tools such as Nessus, Burp Suite, Metasploit, Kali Linux, NMAP, Nikto, WPScan, SQLmap
- Ability to craft enterprise-specific implementation guidance for system owners who are attempting to satisfy NIST SP 800-53 controls
- Experience with an ISCM tool and leading ISCM tactics, tools, and procedures
- Experience and specialized training in DoD's ACAS and HBSS systems, including Information Security Continuous Monitoring (ISCM) and Insider Threat (InT)
- Planning, execution, and assessment of threats
- Ability to conduct research on new and emerging information technologies and develop vulnerability assessment capabilities
- Bachelor's degree in Computer Science, Information Technology, Cyber Security or related field, or equivalent combination of education and experience and training
- 10+ years' of Vulnerability Assessment experience
- One or more of the following certifications: CISSP, Security+, Network+, CySA+, CompTIA, The GIAC Security Essentials Certification
- Active Public Trust 6c clearance or higher or eligible for Public Trust 6c clearance
- DevSecOps experience
- Experience with governance, risk assessment, and compliance for FISMA, FedRAMP, and NIST SP 800 series including NIST SP 800-37 and NIST SP 800-53, system security plans, security and privacy controls, POA&M management, assessment and authorization (A&A), Authority To Operate (ATO) and continuous monitoring processes
- Experience compiling and tracking vulnerabilities and mitigation results to quantify program effectiveness
- Experience creating and maintaining vulnerability management policies, procedures, and training
Benefits
- 100% Fully Remote Position
Company Overview