Vulnerability & Threat Analyst
Vulnerability & Threat Analyst
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Not Disclosed
Salary Not Disclosed
1 Vacancy
Job Description
Position: Systems Security Analyst (Vulnerability & Threat Analyst)
Location: Reston VA(Onsite)
Description:
The Systems Security Analyst IV role will deliver on the following responsibilities:
- Contribute to the team responsible for conducting full governance lifecycle analysis for Vulnerability Management process includes monitoring assessment and oversight.
- Contribute to the team responsible for determining business areas that pose potential threats to the enterprise
- Manage information monitoring and processes to reduce risk using rigorous analysis
- Oversee the effective and efficient remediation efforts of vulnerabilities.
Qualifications
- Experienced analyzing data to assess and identify potential security weaknesses in systems networks and application.
- Experienced evaluating the risk of vulnerabilities prioritize remediation efforts and work with teams to implement fixes and mitigations
- Experienced researching vulnerabilities emerging threats and best practices in vulnerability management
- Experienced providing reports and analysis to management and other stakeholders communicating findings and recommended actions
- Assist in coordinating and resolving security incidents related to identified vulnerabilities
Skills
- Proven 5 years of work experience with vulnerability management including vulnerability assessment
- 5 years of work experience with system and application security threats and vulnerabilities (e.g. buffer overflow mobile code cross-site scripting Procedural Language/Structured Query Language PL/SQL and injections race conditions covert channel replay return-oriented attacks malicious code)
- Knowledge of what constitutes a network attack and a network attacks relationship to both threats and vulnerabilities
- Work experience with vulnerability scanners such as Wiz Tenable NexusIQ etc
- Strong understanding of emerging threat intelligence (CISA Kenna etc )
- Knowledge of network security architecture concepts including topology protocols components and principles
- Knowledge of how traffic flows across the network
- Knowledge of application vulnerabilities
- NIST Cybersecurity framework (CSF) NIST Risk Management Framework (RMF) are a plus
- Certifications: CISA CRISC CIA CISM and/or CISSP are a plus
Employment Type
Full-time
