Senior Vulnerability Management Analyst at General Dynamics Information Technology

Springfield, Virginia, United States -

Full Time

Start Date

Immediate

Expiry Date

11 Sep, 26

Salary

125350.0

Posted On

13 Jun, 26

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

ACAS, Tenable.sc, Nessus Agent, Nessus Network Monitor, Vulnerability Management, Vulnerability Assessments, Data Analytics, SQL, Tableau, Power BI, TCP/IP, OSI, ITIL, Security Reviews, Compliance Evaluation

Industry

IT Services and IT Consulting

Description

Type of Requisition: Regular Clearance Level Must Currently Possess: Secret Clearance Level Must Be Able to Obtain: Secret Public Trust/Other Required: None Job Family: Cyber and IT Risk Management Job Qualifications: Skills: ACAS, Security Tools, Vulnerability Assessments, Vulnerability Management Certifications: None Experience: 10 + years of related experience US Citizenship Required: Yes Job Description: Check out this great opportunity to join one of GDIT’s fastest long-standing growing programs! US Battlefield Information Collection and Exploitation Systems eXtended (US BICES-X) is a cutting-edge program supporting DoW intelligence information sharing on current and emerging global threats to mission and coalition partners and emerging nations. With an internationally dispersed team supporting each combatant command, the US BICES-X team is in direct support of the war fighter and their missions. We are seeking a creative and driven professional with a passion for solving real world issues on a cross-functional, fast paced team. The Vulnerability Analyst is a strong, self-motivated, solution-oriented individual who will be joining an experienced team to support the implementation and sustainment of ACAS across multiple networks. We are looking for an experienced, innovative, and enthusiastic analyst to join us in delivering high quality IT systems. Responsibilities: Conduct and Manage ACAS Vulnerability Scanning, including Tenable.sc, Nessus Agent and Nessus Network Monitor. Analyze policies, configurations, and evaluate compliance with regulations and directives. Maintain knowledge of applicable policies, regulations, and compliance documents specifically related to ACAS. Perform vulnerability assessments and security reviews to identify weaknesses and vulnerabilities within systems that affect the confidentiality, integrity and availability of data. Analyze vulnerability reports and suggest remediation / mitigation plans. Coordinate with cybersecurity administrators to improve security tools for monitoring and increasing coverage of existing tools. Collect, aggregate, synthesize, analyze and report on data from multiple sources and formats. Provide technical support to system owners to propose mitigation and remediation solutions to identified vulnerability and security issues. Leverage enterprise methodologies and patterns. Develop high level system design diagrams and system documentation. Evaluate, analytically and systematically, problems with workflows, organization and planning and develop appropriate corrective actions. Excellent written and verbal communication skills, with a strong attention to detail and superior ability for problem solving. Required Qualifications: 10+ years of experience. Must meet DOW 8140 requirements and be eligible for IAT level II. Must possess and maintain a Secret Security Clearance. BA/BS or the equivalent combination of education, technical training, or work/military experience. A minimum of five (5) years' experience in building, maintaining, and supporting ACAS related technologies: Tenable.sc, Nessus Agent, and Nessus Network Monitor. Experience with data analytics, preferably using Excel, Access, SQL, Tableau, Power BI and Tenable.sc API. Must have completed ACAS Operator and Supervisor course within the last three years. Ability to work in a team-oriented, collaborative environment. Ability to work efficiently in a fast-paced environment and multi-task while still ensuring high quality of work Highly organized with strong ability to prioritize work and work autonomously Excellent verbal and written communication skills Great attention to detail and presentation Results driven, highly efficient, energetic, and highly motivated Preferred Qualifications: Knowledge of how traffic flows across the network (TCP/IP, OSI, ITIL). Knowledge of authentication methods and supporting protocols. Skilled in conducting vulnerability scans and recognizing vulnerabilities in systems. Developing and presenting briefings to senior leadership. #GDITPriority The likely salary range for this position is $107,744 - $125,350. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range. Scheduled Weekly Hours: 40 Travel Required: None Telecommuting Options: Onsite Work Location: USA VA Springfield Additional Work Locations: Total Rewards at GDIT: Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most. We are GDIT. A global technology and professional services company that delivers consulting, technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50 countries worldwide, offering leading capabilities in digital modernization, AI/ML, Cloud, Cyber and application development. Together with our clients, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology. Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc. Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans Join our 26,000 everyday heroes. We are GDIT. A global technology and professional services company that delivers consulting, technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 30 countries worldwide, offering leading capabilities in digital modernization, AI/ML, Cloud, Cyber and application development. Together with our clients, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology. For more information about GDIT's Privacy Policy, click here: https://www.gdit.com/privacy-policy/notices/

Responsibilities

Conduct and manage ACAS vulnerability scanning using Tenable.sc and Nessus tools to identify system weaknesses. Analyze vulnerability reports to propose remediation plans and coordinate with cybersecurity administrators to improve security tool coverage.