Vulnerability Systems Engineer with Security Clearance

---

Job description

This position is hybrid remote and requires to be onsite 2 days a week in Washington, DC. Must be local to DC, MD, and VA areas or within a 2-hour commute PRISM seeks a Vulnerability Systems Engineer who will play a critical role in safeguarding our organization's infrastructure by identifying, analyzing, and remediating vulnerabilities across our Windows server environment. This position requires a blend of technical expertise, problem-solving skills, and a strong understanding of security best practices. Responsibilities: Vulnerability Assessment and Remediation:
Conduct regular vulnerability scans using tools like Tenable Nessus and BigFix.
Analyze scan results to identify critical and high-risk vulnerabilities.
Prioritize and remediate vulnerabilities promptly.
Develop and implement remediation plans, including scripting and automation.
Security Hardening:
Harden Windows servers by applying security patches, updates, and configurations.
Configure security settings according to industry best practices and standards (e.g., NIST, CIS).
Implement robust password policies and access controls. Incident Response:
Respond to security incidents and conduct root cause analysis.
Implement corrective measures to prevent future incidents. Documentation:
Maintain accurate and up-to-date documentation of system configurations, procedures, and security policies. Collaboration:
Work closely with infrastructure, operations, and security teams to ensure effective collaboration and knowledge sharing.
Coordinate with other teams to implement security measures and resolve issues. Qualifications:
Active DoD Secret or higher clearance.
7+ years of experience in Windows server administration and security.
Strong understanding of security principles, including threat modeling, risk assessment, and incident response.
Proficiency in scripting languages (PowerShell, Python, VBScript) for automation and remediation tasks.
Experience with vulnerability scanning tools (Tenable Nessus, BigFix).
Knowledge of security frameworks and standards (NIST, CIS).
Strong problem-solving and analytical skills.
Excellent communication and interpersonal skills.
Certifications (e.g., Security+, CISSP, CISA, CISM) preferred.

<!– job description page –>