Visual Connections, LLC is seeking Vulnerability Assessment Analyst - Mid.

REQUIREMENTS

• Bachelor’s degree in Cybersecurity, Information Technology, or related field.
• Proven experience in vulnerability scanning and security testing.
• In-depth knowledge of scanning tools (Tenable Security Center, Nessus Scanner, NMAP).
• Strong analytical and problem-solving skills.
• Excellent communication and documentation abilities.

• Perform vulnerability scanning against databases for known vulnerabilities, security misconfigurations, and compliance-related requirements.
• Scan Coordination
• Coordinate CSOC-managed network scans with field points of contact
• Review and verify hosts/ IPs to be scanned
• Review and select appropriate scan policy(s)
• Coordinate with network and team personnel
• Scan Execution
• Monitor/ coordinate/ react as required throughout the duration of the scan
• Troubleshoot any issues that occur during the scan
• Verify accuracy of data and conduct system checks as required upon completion of the scan
• Develop new testing programs
• Scan Reporting
• Verify, update, create report templates
• Produce Database Post Scan Findings Reports
• Conduct quality assurance checks of final reports
• Distribute reports
• Scan Troubleshooting
• Knowledge of common ports and port scanning
• Support Windows, Unix, and Linux operating systems
• Support coordinating and troubleshooting computer/network connection issues
• Support database types to include but not limited to Microsoft SQL Server, Oracle, MySQL, PostgreSQL, MongoDB, AzureSQL, AWS RDS, Other Cloud PaaS Databases
• Produce Database Scan Result Metrics to include program wide statistics and operational metrics collected over time. The statistics and operational metrics can be collected monthly, quarterly, and annually base on vulnerability posture. The Database Scan Result Metrics shall include but not limited to vulnerability counts, asset counts, and vulnerability criticality.
• Manage and maintain backend system software.
• Administer existing and future infrastructure including system maintenance and management.
• Manage and maintain Government owned virtual machines (VM), operating systems, and applications.
• The Contractor shall utilize the following current tools as required. If a new tool is utilized by VA, the Contractor shall utilize the new tool.
• Support Windows, Unix, and Linux operating systems
• VMWare
• AppDetective Pro
• DBProtect
• Nessus Scanner