Vulnerability Analyst
Charleston, SC
Full Time Senior-level / Expert Clearance required USD 143K - 266K *
Sentar Inc.
Sentar is dedicated to developing the critical talent that the connected world demands to create solutions to address the convergence of cybersecurity, intelligence, analytics, and systems engineering. We invite you to join the small business team where you can build, innovate, and secure your career.
The Cyber Operations Center (CyOC) Vulnerability Analyst will support the Defense Health Agency (DHA) CyOC and the Compliance program, which provides cybersecurity reporting, and vulnerability analysis and management functions to DHA. This individual will be detecting weaknesses and vulnerability exposures in DHA Medical Community of Interest (Med-COI) architecture. Additionally, the Vulnerability Analyst will create reports and make recommendations on measures to correct and contribute to the cybersecurity posture for DHA systems and the Med-COI.
Duties:
- Develops risk-based mitigation strategies for networks, operating systems, and applications
- Compiles and tracks vulnerabilities and mitigation results to quantify program effectiveness
- Creates and maintains vulnerability management policies, procedures, and training
- Review and define requirements for information security solutions
- Organize network-based scans to identify possible network security attacks and host-based scans to identify vulnerabilities in workstations, servers, and other network hosts.
- Provide daily, weekly, and monthly reports to leadership authorities and understand the customer challenges in meeting compliance.
- Develop, plan and integrate DHA CyOC communications received from higher authorities such as USCYBERCOM, JFHQ-DoDIN, and DHA; coordinate prioritization with Government Lead, and issue direction to DHA Components from the CyOC.
- Provide cyber security insight concerning existing and emerging vulnerabilities as well as potential adversarial threats to improve incident detection, prevention, and handling procedures.
- Manage the process for coordination, management and control of information through file management and data management discipline.
- Identify, analyze and triage data information requests from Components, comprehend and deconflict issues between higher authorities and affected Components.
- Assist and educate users on authoritative data sources, data tools and presentation tools used to monitor compliance progress with all DHA Components.
- Serve as a liaison between functional teams to oversee communications, and coordinate efforts between those different entities and the customers related to those functional activities.
- Provide communication coordination and management between DHA and partner agency Cyber Operations Centers (e.g. VA CSOC notifies of a cyber incident or event occurs requiring coordination to ensure a Self-Report is created, updated appropriately, and sent to the CSSP Watch Officer.)
Qualifications:
Clearance: Secret
- 12+ years of cyber or technical experience with a technical degree or 15+ years of related experience.
- Demonstrated experience with Risk Management Framework with DoD (DHA experience a plus)
- Demonstrated experience with DISA cybersecurity tools (e.g. CMRS, eMASS, and DoD Scorecard)
- Active IAT level II certification (Security+ CE, CySA+, CCNA - Security, GICSP, GSEC, or higher such as CISSP, CASP, CISCA, etc).
- OS/CE Certification Required (FEDVTE Linux, OS, FEDVTE Windows Operating System Security, Server+, Linux+)
If you are not ready to apply for this position, submit your resume here to join our talent community. We'll keep you updated occasionally on new job opportunities.
Sentar is an Affirmative Action and Equal Opportunity Employer M/F/Vets/Persons with Disabilities
Our culture is one of inclusivity and support. Sentar is proudly an Equal Opportunity and VEVRAA Federal Contractor Employer M/F/Vets/Persons with Disabilities. Follow these links to learn more about your rights: EEO Is the Law Poster; EEO Is Law Supplement; and Pay Transparency.
We want you to build your career at Sentar, so if you are an individual with a disability and require a reasonable workplace accommodation applying for a job or at any point in the employment process, contact the Recruiting Manager at recruiting@sentar.com. Please indicate the specifics of the assistance needed. Thank you for considering Sentar in your employment search.
Build, Innovate, Secure Your Career at Sentar.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Analytics CASP+ CISSP Clearance Compliance CSOC DISA DoD eMASS GICSP GSEC Linux Network security Risk management RMF Vulnerabilities Vulnerability management Windows
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.