Full-Time
Windows Vulnerability Analyst
PD Inc
No salary listed
No H1B Sponsorship
Fort Meade, MD, USA
In Person
US Citizenship, US Top Secret Clearance Required
Bachelor's
Category
 Cybersecurity (1) |
|---|
Required Skills
Microsoft Office
Microsoft Windows
Mainframe Computing
Cybersecurity
Vulnerability Analysis
Linux/Unix
Requirements
- Pursuing a bachelor's degree or equivalent work experience.
- Five or more years of relevant and recent experience with Microsoft Windows Server, .NET Framework, Internet Information Services, and cybersecurity.
- Three or more years of relevant and recent experience with Microsoft Office products.
- Current certification meeting the 8570/8140 requirement.
- Active Secret Clearance.
- Must be a U.S. Citizen.
Responsibilities
- Serve as an operating system technical specialist for assets connected to isolated and cloud environments, NIPRNet, and SIPRNet to support cybersecurity and information technology services.
- Review, identify, and report problems with asset installation and operations, including system options, software use, default security controls, and system-wide options or parameters that may create security vulnerabilities.
- Determine the impact and risk of submitted change requests before implementation and participate in meetings to provide cyber oversight for operating system changes affecting risk levels.
- Recommend security countermeasures to mitigate identified risks.
- Identify, monitor, analyze, report, and brief the status of operating system vulnerabilities across Windows, Unix, mainframe, network devices, cloud technologies, and other platforms.
- Ensure high-risk and high-severity vulnerabilities are managed with increased visibility and escalated.
- Analyze, validate, monitor, and report compliance status for Department of Defense and Defense Information Systems Agency directives and orders.
- Create, maintain, and provide automated and customized vulnerability reports.
- Analyze mission requirements and organizational feedback to improve vulnerability reports and processes.
- Provide recommendations for operating system vulnerability analysis, guidance, deficiency resolution, and implementation suggestions to Defense Information Systems Agency customers and mission partners.
- Assess, audit, review, analyze, validate, and report operating system, Security Requirements Guide, and Security Technical Implementation Guide vulnerabilities, and ensure security controls are implemented in accordance with Department of Defense, Defense Information Systems Agency, and industry cybersecurity policies and procedures.
- Evaluate discrepancies related to policy, orders, operating systems, Security Requirements Guides, and Security Technical Implementation Guides, and document recommended additions, deletions, or changes.
- Identify and report the need for technical guidance to modify policies and orders.
- Review and validate the installation and configuration of cyber tools on assets and report deficiencies.
- Review operating system, Security Requirements Guide, and Security Technical Implementation Guide updates and report changes with potential significant impact.
- Participate in audits and provide documentation, including daily documentation when required.
- Produce daily, weekly, monthly, quarterly, and annual vulnerability analysis reports.