Job Description

Overview

Vulnerability Analyst will scan, analyze and report compliance of systems and network infrastructure on the regional and theater level. Seeks to protect and defend information and information systems by ensuring confidentiality, integrity with non-repudiation, authentication, and availability. Reports to the RCC-SWA Cybersecurity Manager.

This position offers company-paid housing and transportation, a completion bonus and tuition reimbursement program!

You must satisfy all host country requirements to legally work in the host country in order to be qualified for this position.

Responsibilities

+ Vulnerability Analyst's Plan, coordinate, review, analyze and provide feedback to customers on weekly vulnerability scans (i.e., ACAS coordinator/analyst, Security Center administrator).

+ Survey network diagrams and other artifacts, utilize network visualization tools and assist in determining if vulnerability scans are being conducted on all network assets.

+ Identify means of overcoming gaps in vulnerability scanning.

+ Assist in the preparation of vulnerability scanning reports to commanders and high headquarters.

+ Liaison with IAVM manager and ISSO regarding vulnerability and remediation issues.

+ Develop plans and recommend tools for the vulnerability scanning of all network assets to the Military and down trace units.

+ Monitor INFOCON status and maintain awareness of all INFOCON requirements; assess current architecture and computer assets for INFOCON compliance.

+ Communicate and disseminate updates and tabletop exercises among the various commands in the RCC-SWA AOR.

+ Generate and update reports for all areas of responsibility, interact with System Center Configuration Manager (SCCM) administrators in order to leverage scanning and patching battle rhythm.

+ Continuous monitoring of network and systems assets to ensure accurate compliance reporting for Risk Management Framework (RMF).

+ Ability to troubleshoot servers and infrastructure equipment in support of compliance requirements.

+ Ability to assess networking requirements and provide solutions.

+ Ability to make accurate and independent decisions under pressure.

+ Experience with a customer service-oriented company.

+ Excellent organizational, interpersonal, written, and verbal communication skills.

+ Ability to perform comfortably in a fast-paced, deadline-oriented work environment.

+ Ability to successfully execute many complex tasks simultaneously.

+ The work environment will be 95% indoor and 5% outdoor.

+ Perform additional duties as assigned.

Qualifications

+ Qualifications:

+ Education / Certifications: One-year related experience can be substituted for one year of education if the degree is required.

+ Bachelor's Degree or equivalent experience preferably in Computer Science or MIS, IS, Engineering or related field.

+ This position requires candidates to adhere to DoD 8570.01. All candidates are required to maintain at least one (1) baseline certification and one (1) computing environment (CE) certification. Baseline certifications cannot also be used as a Computing Environment (CE) certification. The authorized certifications for this job title are listed as follows:

+ IAT Level: IAT III

+ BASELINE:

+ Cisco: CCNP Security

+ CompTIA: CASP+ ce: Advanced Security Practitioner

+ GIAC: GCED: Certified Enterprise Defender

+ GIAC: GCIH: Certified Incident Handler

+ ISACA: CISA: Certified Information Systems Auditor

+ ISC2: CISSP (or Associate): Certified Information Systems Security Professional

+ COMPUTING ENVIRONMENT (CE):

+ DISA: ACAS: Assured Compliance Assessment Solution 5.3 (or current version)

+ Microsoft: 365 Certified: Enterprise Administrator Expert

+ Microsoft: Certified: Azure Database Administrator Associate

+ Microsoft: Certified: Azure Security Engineer Associate

+ Microsoft: Certified: Azure Solutions Architect Expert

+ Microsoft: MCSA: Cloud Platform

+ Microsoft: MCSA: Windows Server 2012

+ Microsoft: MCSA: Windows Server 2016

+ Microsoft: MCSE: Cloud Platform and Infrastructure

+ Microsoft: MCSE: Core Infrastructure

+ Microsoft: MCSE: Data Management and Analytics

+ Microsoft: MCSE: Productivity Solutions Expert

+ Microsoft: MCSE: Server Infrastructure 2012

+ Experience: One year of related academic study above the high school level may be substituted for one year of experience up to a maximum of a 4-year bachelor's degree in a Software Engineering or Business Information Systems discipline for three years general experience.

+ At least three five years of practical experience working with various data (network and system) technologies, with a minimum of two of those years focused on security.

+ Knowledge of certification tools preferred. Knowledge of Linux configuration and management preferred.

We are committed to an inclusive and diverse workplace that values and supports the contributions of each individual. This commitment along with our common Vision and Values of Integrity, Respect, and Responsibility, allows us to leverage differences, encourage innovation and expand our success in the global marketplace. Vectrus is an Equal Opportunity /Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, national origin, protected veteran status or status as an individual with a disability. EOE/Minority/Female/Disabled/Veteran.