Senior VAT Analyst- Team Lead with Security Clearance

---

Job description

Required Education/Experience
BS degree and 8 -10 years of prior relevant experience Additional years of experience and cyber Primary Responsibilities
• Manage enterprise vulnerability compliance and will conduct vulnerability assessments of IT systems. The VAT team is responsible for the Information Security Vulnerability Management Program and internal/external Vulnerability Assessment program. The VAT team completes vulnerability assessments, authors security advisories, identifies opportunities for improvement, and communicates recommended solutions for addressing vulnerabilities. The right candidate will have the expertise to perform the following:
• Respond to DHS/CISA issued security related alerts, bulletins, and notifications to all components based on identified software and hardware vulnerabilities and monitor for compliance.
• Continuously research emerging threats to the environment in order to disseminate the information to all stakeholders, immediately assess the known environment for presence of the vulnerability, and work with the DHS/CISA Security Operations and enterprise networking teams to proactively block exploitation within the DHS environment.
• Track and report on vulnerability mitigation.
• Present vulnerability scan results to leadership, auditors, systems engineers.
• Support CISA environment through conducting scheduled and ad-hoc vulnerability scanning.
• Employ ad-hoc or emergency scanning to support targeted incident investigations, escalation and emergency response to security events in accordance with documented procedures.
• Coordinate with component security staff to explain findings, provide recommendations on mitigations, and advocate for mitigation of vulnerabilities.
• Conduct, operate, and maintain assessments and the resulting Vulnerability Assessment (VA) data and reports.
• Conduct Host-based and Network Vulnerability Assessments.
• Conduct Database Vulnerability Assessments.
• Conduct Web-based Vulnerability Assessments.
• Mentor Junior VAT Team members. Basic Qualifications
Ability to obtain an Entry of Duty (EOD) Public Trust.
BS degree and 8 -10 years of prior relevant experience
Additional years of experience and cyber certifications may be considered in lieu of a degree.
Extensive experience performing IT security risk and vulnerability assessments.
Experience administering and configuring Tenable Security Center a must.
Strong understanding and experience running and growing a Vulnerability Management Program.
Familiarly with other vulnerability tools such as DBProtect, WebInspect, Nexpose, Qualys, etc. Preferred Qualifications
GIAC Web Applications Penetration Tester (GWAPT)
GIAC Penetration Tester (GPEN)
Certified Ethical Hacker (CEH)
Certified Information Security Manager (CISM)
Certified Web Application Defender (GWEB)
Certified Information System Security Professional (CISSP)

<!– job description page –>