Cybersecurity Vulnerability Analyst (Incident Manager III) Job at Vervic, Arlington, VA

VEtMZDUxSkUrZWdqclNwUUZHVEk3WVhXRmc9PQ==
  • Vervic
  • Arlington, VA

Job Description

Job Description

Job Description

Cybersecurity Vulnerability Analyst (Incident Manager III )

Arlington, VA


Description
Supporting our prime contractor and their U.S. Government customer to provide cybersecurity vulnerability analysis support to reduce the prevalence and impact of vulnerabilities and exploitable conditions across Federal Civilian Executive Branch (FCEB) entities and Critical Infrastructure Key Resources (CIKR).

Seeking a Cybersecurity Vulnerability Analyst to support this critical mission by utilizing cybersecurity best practices, risk management techniques, critical thinking, and strong analytical skills to analyze information from multiple sources, synthesize that information, and provide expert analysis to senior customer stakeholders.

Eligibility

Must be a  US Citizen

Must have an  active TS/SCI clearance

Must be able to obtain DHS Suitability prior to starting employment 

5+ years of directly relevant experience

Responsibilities Include

Utilize creativity and divergent thinking to assess and explain the impact of cybersecurity vulnerabilities on FCEB and CIKR security postures

Conduct prevalence and sector analysis of vulnerabilities with Attack Surface Management tools

Review vulnerability reporting to identify potential risks and impacts CIKR and FCEB entities

Maintain awareness of technical capabilities of Vulnerability Management (VM) Subdivision operational components

Evaluate technical requirements of VM operational components and recommend paths forward

Understand and articulate the impact of vulnerabilities to organizations

Coordinate with VM analysts and leadership to synchronize VM operational activities

Coordinate with broader Cybersecurity Division (CSD) analysts and leadership to understand CSD operational priorities and activities

Willingness, ability, and flexibility to assist the government to standup this new mission operations area within VM

Demonstrated ability to contribute to developing Standard Operating Procedures and Work Instructions as required

Demonstrated ability to contribute to weekly operation summaries, intelligence analysis summaries, and other cyber intelligence reports

Required Skills

Experience as a hands-on cybersecurity analyst (i.e. SOC Analyst or Penetration Tester) is required

Experience with the analysis and characterization of cyber attacks

Skilled in identifying different classes of attacks and attack stages

Knowledge of system and application security threats and vulnerabilities

Knowledge of basic networking protocols, including TCP/IP, UDP, SSH, and DNS, and open security standards and projects, including OWASP

Knowledge of CVSS and KEV scoring methodology

Knowledge of general attack stages (e.g., foot printing and scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks, etc.)

Knowledge of VM scanning, Web Application scanning, and red team processes

Experience recognizing and categorizing types of vulnerabilities and associated attacks

Knowledge of Computer Network Defense policies, procedures, and regulations

Knowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non nation-state sponsored], and third generation [nation-state sponsored])

Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return-oriented attacks, and malicious code)

Experience in developing and delivering technical briefings

Must be able to work collaboratively across physical and virtual locations

Desired Skills

Understanding of OT/ICS/SCADA technologies and associated vulnerabilities

Experience with conducting all-source research

Understanding of MITRE Adversary Tactics, Techniques and Common Knowledge (ATT&CK)

Experience with:

  • SharePoint
  • ServiceNow
  • Palo Alto Networks Cortex Xpanse
Desired Certifications

CompTIA Security+, CEH, CISSP, CISM, CISA, CCSP, CIPP, CPT, CCSS

Required Education

  • BS Computer Science, Computer Engineering, Computer Information Systems, Cybersecurity or related degree.
  • HS Diploma with 7+ years of cyber incident management or cybersecurity experience

Proud Equal Opportunity Employer (EOE)

If hired, you must pass a background check and drug screening before your start date.

Job Tags

For contractors,

Similar Jobs

Specialty Professional Services

Travel RN Clinical Education Specialist (Labor & Delivery, Mother-Baby, NICU) Job at Specialty Professional Services

Job Description Specialty Professional Services is seeking a travel nurse RN Clinic Labor and Delivery for a travel nursing job in Washington, District of Columbia. Job Description & Requirements ~ Specialty: Labor and Delivery ~ Discipline: RN ~ Start Date...

CHRISTUS Trinity Clinic SR Preventative and Diagnostic Medic...

Internal Medicine - Physician Job at CHRISTUS Trinity Clinic SR Preventative and Diagnostic Medic...

 ...Internal Medicine - Physician at CHRISTUS Trinity Clinic SR Preventative and Diagnostic Medicine - CHRISTUS Health summary: The position is for a board-certified or board-eligible Internal Medicine Physician at CHRISTUS Trinity Clinic in San Antonio, TX, focusing on... 

PetSitter.com

Pet Sitter Wanted - Pet Grooming Wanted In Nicholasville Job at PetSitter.com

 ...Will need to be kept from other animals and just given a command to stop if barking or refrained from trying to run at another dog while walking or out. I need a pet taxi who will take him on errands such as the vet (healthy) and groomer. Also need an occasional walker.... 

Performance Staffing Solutions, Inc.

Bilingual Spanish Staffing Recruiter Job at Performance Staffing Solutions, Inc.

 ...The ideal candidate must be fluent in Spanish and English (written and spoken), comfortable meeting new people frequently and have an ability to determine a candidate's potential through clever questions. They should have excellent organizational skills in order to build... 

Spade Recruiting

Remote Customer Care Advisor Job at Spade Recruiting

 ...supporting families and strengthening their financial security. This remote role is ideal for individuals who value flexibility, purpose,...  ...who care about making a positive impact Experience in customer service or sales is a plus, but not required Your Next Step If...