Vulnerability Assessment Analyst

Creates cyber-intelligence tools / methods and performs research and analysis in order to mitigate and eliminate data and cyber security risks. Develops acceptance criteria for cybersecurity architecture.  Provide Vulnerability Assessment (VA) support to agency information systems.

• Assist the Government in managing Enterprise Information System Vulnerability Management (ISVM) compliance validation. 
• Assist the Government in briefing leadership on current and future vulnerabilities, security policies and industry standards.
• Assist the Government in briefing leadership on most impactful vulnerabilities, configurations, and penetration testing efforts. 
• Assist the Government in creating and managing all scans in accordance with the VAT scan standardization documentation.
• Assist the Government in performing regularly scheduled vulnerability assessments using a master schedule as directed. 
• Assist the Government in managing, customizing, and maintaining scan policies, zones, and repositories as they relate to the agency network.
• Assist the Government in performing scan functions and review scan results to ensure accurate findings.
• Assist the Government in creating and customizing scan reports and data feeds to be imported / integrated into third party assessment tools. 
• Support the coordination of the VA scanning and testing in advance with the system ISSO and the Government Task Monitor (TM) to assure coordination with network maintenance, availability, and operations.
• Coordinate with system owner / ISSM/ ISSO to make any necessary changes to the schedule.
• Assist the Government in maintaining a repository of VA application issues and report application issues to Government VAT Team Lead and SSD Director.
• Travel to be physically on location to perform onsite security assessments of agency facilities, systems, and applications as requested.

• Bachelor’s Degree in Computer Science or a related field or equivalent experience.
• Minimum 5 years of professional experience in information assurance, cybersecurity, risk management, or compliance; to include experience with IT vulnerability assessments/management.
• Candidates must be US citizens (no dual citizens) with the ability to pass a federal background investigation in order to be granted access to sensitive information.

It is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies.

All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. All decisions on employment are made to abide by the principle of equal employment.

Physical Requirements

The physical requirements described in "Knowledge, Skills and Abilities" above are representative of those which must be met by an employee to successfully perform the primary functions of this job. (For example, "light office duties' or "lifting up to 50 pounds" or "some travel" required.) Reasonable accommodations may be made to enable individuals with qualifying disabilities, who are otherwise qualified, to perform the primary functions.

• Familiarity with Zero Trust Architecture Implementation and best practices.
•  Must be able to communicate effectively and clearly present technical approaches and findings.
• Exercises a limited degree of latitude in determining technical objectives of assignments.
• Excellent attention to detail.
• Must be able to balance multiple tasks simultaneously.

The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.