Vulnerability Assessor (Mid) - Springfield, VA
Springfield, VA
Applications have closed
- Remote-first
- Website
- @GuidePointSec 𝕏
- GitHub
- Search
GuidePoint Security LLC
GuidePoint Security provides trusted cybersecurity consulting expertise, solutions, and services that help organizations make better decisions and minimize risk.GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.
Must be eligible to obtain a Public Trust clearance to support the US Government program (US Citizens only; clean background).
Work will be performed 100% onsite.
GuidePoint is seeking highly qualified candidates for an upcoming Government contract award. Hiring for this position is contingent upon contract award.
The Vulnerability Management Engineer will be responsible for the execution of vulnerability scans, analysis of scan results, reporting on findings, and tracking remediation efforts. Additionally, this role will be responsible for building and implementing automated vulnerability workflows and systems for efficient monitoring and tracking of vulnerabilities. This role requires more systems engineering than analyst experience for vulnerability management systems.
This position requires an active Public Trust security clearance (Must be US Citizen; GuidePoint can sponsor once an offer letter is signed). Work will be performed on multiple customer sites in the DC Metro area.
What You'll Get To Do:
-
Create and publish security related alerts, bulletins, and notifications based on identified software and hardware vulnerabilities, and monitor for compliance.
-
Provide continuous monitoring of vulnerability remediation efforts, maintaining an up-to-date and accurate tracking system to oversee the remediation process.
-
Conduct thorough research and deliver written reports on emerging cyber threats, providing insightful updates and assessments to the enterprise to aid in proactive defense.
-
Offer expert guidance on threat mitigation and best security practices, assisting the community in enhancing their security measures and knowledge.
-
Develop and provide metrics for compliance programs, ensuring enterprise-wide adherence to regulatory and security standards.
-
Collaborate with developers to build and implement automated systems for efficient monitoring and tracking of vulnerabilities.
-
Develop standard operating procedures (SOP)s, documentation, and best practices for security management, distributing this knowledge across the enterprise.
-
Communicate effectively about vulnerabilities, ensuring clarity and promptness in the dissemination of critical information.
-
Conduct research to identify appropriate system owners and necessary contacts for addressing discovered vulnerabilities, facilitating rapid response and resolution.
-
Identify, track, and document system-level vulnerability applicability and notify stakeholders of identified vulnerabilities, risks, and credible threats.
-
Collaborate with teams to ensure a robust security posture across the enterprise.
You'll Bring These Qualifications:
- Minimum 3 years of experience in vulnerability management or vulnerability assessments
- Must possess an active Public Trust clearance or eligible to obtain a Public Trust clearance
These Qualifications Would Be Nice To Have:
- Experience developing information security and vulnerability metrics for government mandates and initiatives
- Experience performing cyber threat research and disseminating intel to various stakeholders in a classified setting
We use Greenhouse Software as our applicant tracking system and Free Busy for HR screen request scheduling. At times, your email may block our communication with you. Please be sure to check your SPAM folder so that you don't miss updates on your application.
Why GuidePoint?
GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 1000 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 4,200 customers.
Firmly-defined core values drive all aspects of the business, which have been paramount to the company’s success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity.
This is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation.
Some added perks….
- Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
- 100% employer-paid medical premiums (employee only $0 deductible and HSA plans) along with 75% employer-paid family contributions
- 100% employer-paid dental premiums (employee only) along with 75% employer-paid family contributions
- 12 corporate holidays and a Flexible Time Off (FTO) program
- Healthy mobile phone and home internet allowance
- Eligibility for retirement plan after 2 months at open enrollment
- Pet Benefit Option
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Clearance Compliance Monitoring Security Clearance Threat Research Vulnerabilities Vulnerability management Vulnerability scans
Perks/benefits: Career development Flex hours Flex vacation
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.