Evolver Federal is seeking a highly skilled and motivated Vulnerability Analyst to support our government client. This position is currently 100% remote. On-site support would only be required under specialized circumstances. The federal site location is in Camp Springs, MD.
The ideal candidate will have experience reviewing the output of security scanning tools to identify security weaknesses across the enterprise, identify commonalities and trends, and develop recommended remediation strategies. The goal is to increase efficiencies in the remediation process. The candidate should possess foundational skills to apply analytical and computational techniques and methodologies to identify problems and recommend solutions. The individual must be able to work independently and have a solid understanding of cybersecurity concepts.

BASIC QUALIFICATIONS:

• Bachelor’s degree in Information Technology, Cybersecurity, or a related field and 8 years of related experience or 10 years of work experience in a relevant field.
• 10 years of experience in information security, security engineering, or a related role.
• Previous experience administering, and leveraging cloud tools in AWS, Azure, and/or Google.
• Previous experience administering, and/or evaluating technology solutions within Windows, CentOS, Red Hat Enterprise Linux Server, and/or Ubuntu environments.
• Previous experience using one or more of the following tools: Tenable.io, Nexus IQ Server, Splunk Enterprise V9.2 and higher.
• Previous experience with cyber security concepts and working knowledge of the NIST SP 800-37 Risk Management Framework.
• Must be a US Citizen with suitable eligibility for a Public Trust position.

PREFERRED QUALIFICATIONS

• Ability to communicate clearly and effectively via written and verbal communication in both formal and informal situations.
• Ability to clearly communicate complex technical concepts to Information Technology Project Managers, Database Administrators, Application Developers, and Security Compliance Analysts, as well as non-technical POCs such as Branch Chiefs and Business System Owners.
• Previous experience supporting Department of Homeland Security federal clientsCISSP, CISM, CEH and or equivalent
• 
  Evolver Federal is an equal opportunity employer and welcomes all job seekers. It is the policy of Evolver Federal not to discriminate based on race, color, ancestry, religion, gender, age, national origin, gender identity or expression, sexual orientation, genetic factors, pregnancy, physical or mental disability, military/veteran status, or any other factor protected by law.
  Actual salary will depend on factors such as skills, qualifications, experience, market and work location. Evolver Federal offers competitive benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies

• Review and analyze the output of security scanning tools, such as Tenable.io (TIO) and other security toolsets, to identify security weaknesses across the enterprise.
• Provide technical analysis and guidance in software and/or hardware support tools.
• Apply analytical and computational techniques and methodologies to identified problems and recommend solutions.
• Develop enterprise strategies for remediation of identified vulnerabilities.
• Perform enterprise-wide strategic systems planning, business analysis and develop associated recommendations.
• Perform process and data modeling in support of the planning and analysis efforts using both manual and automated tools.
• Leverage the Continuous Monitoring Splunk Dashboards and other relevant data sources to correlate data and events across information systems.
• Identify and advise on process improvements for enhancing current toolsets in support of the client’s Continuous Monitoring Program.
• Coordinate with the Enterprise Information System Security Officer (ISSO) to understand weaknesses across the enterprise and document associated remediation strategies and milestones in the form of Plans of Action & Milestones (POA&Ms).
• Review data feeds, understand and identify risk/impacts, and report on critical weaknesses affecting the enterprise.