Cybersecurity Vulnerability Analyst (Incident Manager III)
Solutions³ LLC is supporting our prime contractor and their U.S. Government customer to provide cybersecurity vulnerability analysis support to reduce the prevalence and impact of vulnerabilities and exploitable conditions across Federal Civilian Executive Branch (FCEB) entities and Critical Infrastructure Key Resources (CIKR). Solutions³ LLC is seeking a Cybersecurity Vulnerability Analyst to support this critical mission by utilizing cybersecurity best practices, risk management techniques, critical thinking, and strong analytical skills to analyze information from multiple sources, synthesize that information, and provide expert analysis to senior customer stakeholders. Eligibility:
- Must be a US Citizen
- Must have an active TS/SCI clearance
- Must be able to obtain DHS Suitability prior to starting employment
- 5+ years of directly relevant experience
- Utilize creativity and divergent thinking to assess and explain the impact of cybersecurity vulnerabilities on FCEB and CIKR security postures
- Conduct prevalence and sector analysis of vulnerabilities with Attack Surface Management tools
- Review vulnerability reporting to identify potential risks and impacts CIKR and FCEB entities
- Maintain awareness of technical capabilities of Vulnerability Management (VM) Subdivision operational components
- Evaluate technical requirements of VM operational components and recommend paths forward
- Understand and articulate the impact of vulnerabilities to organizations
- Coordinate with VM analysts and leadership to synchronize VM operational activities
- Coordinate with broader Cybersecurity Division (CSD) analysts and leadership to understand CSD operational priorities and activities
- Willingness, ability, and flexibility to assist the government to standup this new mission operations area within VM
- Demonstrated ability to contribute to developing Standard Operating Procedures and Work Instructions as required
- Demonstrated ability to contribute to weekly operation summaries, intelligence analysis summaries, and other cyber intelligence reports
- Experience as a hands-on cybersecurity analyst (i.e. SOC Analyst or Penetration Tester) is required
- Experience with the analysis and characterization of cyber attacks
- Skilled in identifying different classes of attacks and attack stages
- Knowledge of system and application security threats and vulnerabilities
- Knowledge of basic networking protocols, including TCP/IP, UDP, SSH, and DNS, and open security standards and projects, including OWASP
- Knowledge of CVSS and KEV scoring methodology
- Knowledge of general attack stages (e.g., foot printing and scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks, etc.)
- Knowledge of VM scanning, Web Application scanning, and red team processes
- Experience recognizing and categorizing types of vulnerabilities and associated attacks
- Knowledge of Computer Network Defense policies, procedures, and regulations
- Knowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non nation-state sponsored], and third generation [nation-state sponsored])
- Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return-oriented attacks, and malicious code)
- Experience in developing and delivering technical briefings
- Must be able to work collaboratively across physical and virtual locations
- Understanding of OT/ICS/SCADA technologies and associated vulnerabilities
- Experience with conducting all-source research
- Understanding of MITRE Adversary Tactics, Techniques and Common Knowledge (ATT&CK)
- Experience with:
- SharePoint
- ServiceNow
- Palo Alto Networks Cortex Xpanse
Required Education: BS Computer Science, Computer Engineering, Computer Information Systems, Cybersecurity or related degree. HS Diploma with 7+ years of cyber incident management or cybersecurity experience
Recommended Jobs
Help Desk Lead - Senior
Help Desk Lead - Senior Position Description CGI Federal has an exciting opportunity for a Helpdesk Lead within our Intel sector advancing the national security mission through cutting edge tech…
Commercial Driver (non-CDL)
Job Description Job Description USAM, a high-end architectural millwork firm is looking for a delivery driver/ loader/unloader in Manassas, VA. As a full-time driver/loader, you’ll ensure smooth,…
CNA / PCA / HHA - KING GEORGE IMMEDIATE START!
Are you looking for a rewarding job, look no further. BrightStar Care is hiring candidates with a valid PCA/HHA/CNA certification, current CPR, negative PPD test or chest X-ray, clean background, able…
FLOOR TECHNICIAN (FULL TIME)
We are hiring immediately for full time FLOOR TECHNICIAN positions. Location : Virginia Commonwealth University - 1201 East Marshall Street, Richmond, VA 23298. (Openings at other locatio…
Catering Delivery Driver
The RedWagon Delivers is now seeking individuals who know how to hustle and grind! Our ideal candidate works for Doordash, GrubHub, and/or Uber Eats, may have experience with catering delivery, and …
Director of Admissions
Responsibilities Director of Admissions Located in South Central Virginia, The Hughes Center is a highly-structured psychiatric residential treatment facility for youth ages 10 to 22 with…
Fighter Pilot - (Secret Clearance)
Position: Fighter Pilot or WSO (Weapon Systems Officer) / CSO (Combat Systems Officer) / NFO (Naval Flight Officer) Location: Langley AFB, VA Clearance Required: Active D.O.D. Secret Clearanc…
Bartender (Merrifield)
Job Description Job Description LevelExperienced Job LocationTed's Bulletin Merrifield - Fairfax, VA Position TypeFull-Time/Part-Time Education LevelHigh School Job CategoriesRestaur…
Star Express Cashier
Looking for a fast-paced work place? Star Express is a growing convenience store chain in Central Virginia. We are looking for FRIENDLY and SMILING faces. Benefits of a flexible schedule, ADVANCEMENT…