VULNERABILITY MANAGEMENT ANALYST (OS/INFRASTRUCTURE)

Serves as vulnerability management analyst for assigned information systems and computer networks. Analyzes vulnerabilities and characterizes risk to networks, operating systems, applications, databases, and other information system components. Engages with stakeholders and mission partners to facilitate vulnerability discovery through manual review and/or the use of vulnerability scanners. Facilitates the coordination of remediation efforts, prioritizing remediation efforts based on risk. Recommends appropriate actions to remediate vulnerabilities and mitigate risks and ensures the implementation of appropriate security settings to include those required by Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIG). Supports and ensures compliance with DOD Information Assurance Vulnerability Management (IAVM) program. Tracks and reports security and compliance issues. Validates remedial actions and ensures compliance with Client and DOD information security policy.Minimum Experience:

Five (5) years relevant experience

Required Skills:

Required to possess a DOD SECRET Clearance, and be eligible for an IT-II upon assignment.

DoD Approved 8570 Baseline Certification: Category IAM Level II

Hands-on experience working with vulnerability scanners

Understanding of vulnerabilities and remediation techniques