Vulnerability Assessment Analyst

• Maintain and optimize the Tenable Security Center infrastructure.
• Conduct regular security patching, assessments and scans on Linux Security Center servers using Tenable Nessus.
• Mitigate STIGS/Vulnerabilities on Tenable Linux Security Center Servers and Windows/Linux Nessus Scanning Servers.
• Install and update Tenable Nessus Software on Linux/Windows Scanning Servers.
• Install and update Tenable Security Center Software on Linux Servers.
• Configure and fine-tune scanning policies and asset lists to ensure thorough vulnerability coverage.
• Keep abreast of the latest Tenable Security Center features and updates.
• Perform regular vulnerability assessments of multiple device types and Operating Systems using Tenable Security Center.
• Utilize Nessus Scanning Tool to identify vulnerabilities across customer assets on a Continuous Monitoring basis.
• Review Nessus/ACAS scan results and provide direction where required.
• Recognizes potential, successful, and unsuccessful scan results for efficiency in reporting compromises through reviews and analyses of relevant event detail and summary information.
• Analyze scan results and generate comprehensive vulnerability reports.
• Monitor and track vulnerability remediation progress.
• Collaborate with ISS and other teams to ensure timely vulnerability remediation.
• Communicate effectively with stakeholders about the security posture and potential risks.
• Prepare and deliver clear and concise reports to management and stakeholders.
• Maintain accurate records of security incidents and vulnerabilities.

Required Skills

• HS Diploma or GED AND 11 years of experience
• Bachelor's degree AND 7 years of experience
• Familiarity with DISA STIGs, Tenable Audit files, and/or CIS Benchmarks
• Hands-on operational experience with enterprise vulnerability management and scanning solutions, such as Tenable
• Knowledge of system and application security threats and vulnerabilities
• Working knowledge of networking, Linux/Unix, Windows administration, patch deployment and system configuration
• IAT Level 2
• CEH
• CompTIA Security+ CE
• Active TS/SCI security clearance with a current polygraph is required

Desired Skills

• In-depth knowledge of vulnerability assessment methodologies, tools, and best practices
• Self-starter, ability to work effectively both independently and as part of a team including the ability and desire to own every aspect of a task from start to finish
• Strong analytical and problem-solving abilities, with a keen attention to detail

Additional Details

At CyberCore, we believe in taking care of our employees both inside and outside the workplace. Our comprehensive benefits package includes:

• Health Insurance to ensure you and your family stay healthy and well.
• Dental and Vision Insurance for preventive and routine care.
• Basic Life Insurance and Disability Insurance to provide peace of mind for you and your loved ones.
• Paid Holidays and Paid Time Off (PTO) to help you relax, recharge, and enjoy life.
• Paid Parental Leave for new parents to focus on family.
• Tuition Reimbursement to support your professional growth and education.
• A 401(k) plan with a company match to help you plan for your future.

At CyberCore, we are committed to fostering a supportive and enriching environment where you can thrive both personally and professionally.

The salary range for this role is $78,000 - $94,000. This range is a good faith estimate that reflects various experience levels. At CyberCore, we consider multiple factors when determining compensation, including the specific role and its responsibilities, the candidate's professional experience, geographic location, education, and relevant skills. This range is not a guarantee of salary, as final compensation may also be influenced by contractual requirements and other considerations.

Equal Employment and Diversity

CyberCore has, on many occasions, expressed support and commitment to the principles of diversity and equal employment opportunity. It is CyberCore's policy to recruit, hire, train, and promote individuals, as well as administer all personnel actions, without regard to race, color, national or ethnic origin, pregnancy, age, religion, disability status, sex, sexual orientation, gender identity and expression, veteran status, genetic information or any other characteristic protected under applicable federal or state law. CyberCore will not tolerate unlawful discrimination, and any such conduct is prohibited. CyberCore is committed to ensuring that CyberCore's workforce and volunteers reflect America's diverse population. CyberCore knows that such diversity will enrich the company with the talent, energy, perspective, and inspiration we need to achieve our mission.