Sr. IT / Scanning Specialist

Job Location: Arlington, Virginia

Clearance Required: Secret/Top Secret preferred

Years of Experience: 9

Education: See below

General:

Preferred Certifications:

• CISSP
• Certified Ethical Hacker
• NSA IAM/IEM
• SANS GCIH and/or GCIA
• Security+ and/or Network+

Must possess nine (9) years of substantive IT knowledge and demonstrate hands-on expertise and/or training in areas of emerging technologies. These areas include, but are not limited to national policy development, continuity of Government and operations, crisis management, disaster recovery, database frameworks, and Enterprise resource planning, Hypertext Markup Language (HTML), Hypertext Transfer Protocol (HTTP), Web portals, firewalls, geographic information systems, visual simulation applications, and remote sensing/satellite imagery. 

Education

• Bachelor’s Degree in Computer Science, Information Systems, Engineering, Telecommunications, or other related scientific or technical difficulties.

---

Duties:

• Use active vulnerability scanners to perform high-speed discovery, configuration auditing, asset profiling, sensitive data discovery, and vulnerability analysis of the enterprise security posture. Support full life-cycle vulnerability and configuration management. Communicate recommendations to the responsible parties, track remediation’s and verify security patches and required configurations. Scan the entire enterprise, inside DMZs, and physically separate networks.
• Develop and maintain policy and SOP updates
• Analyze available security information including results of configuration compliance verification, vulnerability assessment, security and system patch information, field reports, OIG reports, and intelligence information to assess the status of remote organization’s cyber security posture.
• Operate, maintain and configure the configuration compliance verification tool; apply regular updates from the vendor; provide operation, troubleshooting, training and helpdesk support.
• Operate, maintain and configure the vulnerability assessment tool suite; apply regular updates from the vendor; provide operation, troubleshooting, training and helpdesk support.
• Operate, maintain and configure the web security assessment tool suite; apply regular updates from the vendor; provide operation, troubleshooting, training and helpdesk support.
• Maintain and operate all hardware supporting the configuration compliance verification and vulnerability assessment activities including system administration, configuration management, technical troubleshooting, backup/recovery, training and user support.
• Develop configuration benchmarks and vulnerability checks based on established configuration standards and CVEs (Common Vulnerabilities and Exposures) using the Security Content Automation Protocol (SCAP).
• Perform liaison activities with other bureaus and offices.
• Support incident response, threat analysis, forensics and penetration testing teams by performing ad hoc and targeted vulnerability scans.

Daily Responsibilities:

• Monitor and analyze system data to identify system vulnerabilities and weaknesses.
• Create and modify SQL queries to conduct scan data analysis.
• Perform and post results of weekly and on demand vulnerability assessments.
• Provide incident reporting and response capability
• Ensure data flows are maintained between internal tools and enterprise wide reporting dashboard.
   

Qualifications:

---

Submit your resume