Vulnerability Management / Cyber Operations Analyst

Dunhill Government Solutions is hiring a Vulnerability Management / Cyber Operations Analyst to support a federal agency's cybersecurity operations. You will run and validate vulnerability scans, prioritize and drive remediation with infrastructure and application teams, monitor for and investigate suspicious activity, and build the tools and methods that reduce data and cyber security risk. This is a full-time, fully remote (telework) role.

Responsibilities:

• Run vulnerability scans; analyze and validate security vulnerabilities and prioritize risks in line with federal Binding Operational Directive (BOD) guidance
• Coordinate remediation with infrastructure and application teams, verify remediation and closure, document false positives, manage risk acceptances and coordinate vulnerability reporting
• Monitor network traffic, system and audit logs and security alerts for suspicious activity
• Investigate suspected and confirmed security breaches, find the root cause, stop active attacks and trace the full impact ("blast radius") of a threat through complex log data
• Support threat analysis and digital forensic activities; troubleshoot quickly when a breach or system failure occurs
• Create cyber-intelligence tools and methods and perform research and analysis to mitigate and eliminate data and cyber security risks
• Design and develop acceptance criteria for cybersecurity architecture
• Support current cyber initiatives and requirements, including audit logging, zero trust architecture and encryption
• Take part in periodic reviews of each system's audits and monitor corrective actions until every action is closed
• Document security events, write incident reports and recommend upgrades to management
• Create security standards and best practices for employees, and explain technical risks and security guidelines clearly to non-technical staff and management

Required qualifications:

• Bachelor's degree in Computer Science or a related field, or equivalent experience
• 5-10 years of experience in systems security
• Security certification such as Security+, CEH, CISSP or other application vendor certifications
• Understanding of network protocols, operating systems (Windows, Linux) and security tools such as SIEM (Security Information and Event Management)
• Familiarity with Tenable Security Center / Nessus scanners
• Knowledge of federal cybersecurity policy and guidance, including OMB, Executive Orders and the NIST 800 series
• Advanced knowledge of encryption, vulnerability assessment, penetration testing, cyber forensics, intrusion detection, and incident response and remediation
• Scripting skills to integrate with security tools and dashboards, plus governance, policy process and documentation skills
• Excellent attention to detail and the ability to balance multiple tasks simultaneously
• US citizen (no dual citizenship, per agency requirements)

Location: Remote (full-time telework), United States.

US Citizenship and the ability to pass a federal background investigation in order to be granted access to sensitive information.

Compensation: $135,000 - $170,000 per year

#cjpost