Mid Vulnerability Assessment Analyst

Description

Position Summary

The Senior Network Engineer supports the Missile Defense Agency (MDA) under the Integrated Research and Development for Enterprise Solutions (IRES) contract. The role involves network design, configuration, installation, testing, troubleshooting, and sustaining IT network and boundary protection systems. This position requires technical expertise in routers, switches, firewalls, and DoD boundary protection technologies.

Essential Duties and Responsibilities

• Perform Defensive Cyber Operations (DCO)/Cyber Security Service Provider (CSSP) duties outlined in Evaluator Scoring Metrics (ESM).
• Conduct proactive and reactive cybersecurity actions to improve enterprise-wide security posture.
• Perform and analyze vulnerability scans using Prisma and ACAS/Nessus.
• Analyze assets, threat, and vulnerability data against known adversary exploits.
• Support development and updates of DCO procedures, manuals, and documentation.
• Support anti-malware operations, respond to malware reports, and assist in implementing protective measures.
• Support host-based security across the enterprise using DoD ESS capabilities.
• Generate vulnerability assessment reports for customers and escalate as needed.
• Create and manage ESS/ACAS queries and dashboards.
• Support enterprise Incident Response IAW DoD regulations.
• Lead cyber events and incident investigations from start to finish.
• Mentor and train junior DCO analysts.

Minimum Qualifications (Knowledge, Skills, and Abilities)

• Must be a U.S. Citizen.
• Must possess an active Secret security clearance.
• 6+ years full-time general work experience (may be reduced with advanced education).
• 4+ years combined experience in vulnerability scanning, cybersecurity frameworks, risk assessment, and enterprise incident response.
• 1+ year leadership or management experience.
• 1+ year experience performing vulnerability scans with enterprise tools.
• Experience using ACAS/Nessus and vulnerability scanning platforms.
• Experience with cybersecurity frameworks and conducting risk assessments.
• Experience performing full lifecycle incident response.
• DoD 8570.01-M IAT Level II certification (CySA+, GICSP, GSEC, Security+ CE, SSCP).
• CSSP Auditor certification (CEH, CySA+, etc.).

Preferred Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or related field.
• Experience with WAN/LAN security (Routers, Switches, Windows/Linux OS).
• Experience with SOC/DCO tools (Firewalls, IDS/IPS, NSM, Bluecoat, Barracuda).
• Experience performing WAN-based ACAS/Nessus compliance scans.
• Experience with host-based security configuration (ESS preferred).
• Ability to mentor/train personnel in fast-paced environments.
• Familiarity with DoD SOC/CSSP environments.
• Familiarity with DCO/CSSP security policies and procedures.
• Active DoD Top Secret clearance (preferred).

Physical Demands and Work Environment

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform these functions.

While performing the duties of this position, the employee is regularly required to talk or hear. The employee frequently is required to use hands or fingers, handle or feel objects, tools, or controls. The employee is occasionally required to stand; walk; sit; and reach with hands and arms. The employee must occasionally lift and/or move up to 25 pounds. Specific vision abilities required by this position include close vision, distance vision, and the ability to adjust focus. The noise level in the work environment is usually low to moderate.

Northern Technologies Group is an equal opportunity employer. We do not discriminate based on race, color, religion, sex, national origin, disability, age, or any other protected status under federal, state, or local law.

Travel

10%

Shift

Normal office hours that align with the core hours of the customer

Note

The company is an Equal Opportunity Employer, drug free workplace, and complies with ADA regulations as applicable.

This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice. Employees will be required to follow any other job-related instructions and to perform any other job-related duties requested by any person authorized to give instructions or assignments. This document does not create an employment contract, implied or otherwise, other than an "at will" relationship.

The salary range listed represents a good faith estimate and is provided in compliance with applicable pay transparency laws. The final compensation offered will be determined based on a variety of factors, including your skills, experience, qualifications, internal equity, and market conditions.