Job description

Job Description:

· Actively search for Indicators of Compromise (IOC) and suspicious activity leveraging all provided tools.

· Monitor and assess system vulnerabilities to ensure compliance with the agency policies and procedures.

· Review ad hoc, weekly and monthly vulnerability scans and create repositories, queries, and dashboards as necessary to ensure vulnerability report information is actionable and available.

· Develop, monitor, and maintain reporting, alerts, and dashboards that facilitate threat detection and response activities.

· Monitor Cybersecurity and Infrastructure Security Agency (CISA) bulletins and alerts, open-source intelligence, and federal guidance to ensure emerging vulnerabilities relevant to the environment are proactively identified, assessed, and remediated or mitigated.

· Review and validate penetration test findings to ensure remediation prior to closure of findings.

· Develop processes for identifying and responding to potential threats identified with the dashboards/reports, and facilitate risk reduction actions such as quarantining systems, processes, and accounts.

· Development and enhancement of Vulnerability Management services to include process, procedure and collaboration improvements.

· Conduct meetings with stakeholders and senior leadership to ensure cooperation in identifying and remediating vulnerabilities and providing status updates.

· Provide guidance and recommendations on implementing vulnerability management program to the customer, including vulnerability identification technology implementation.

· Develop methods to integrate new tools into current workflows.

· Define and create reports and briefings to provide to senior leadership to communicate vulnerability management program capabilities and performance.

· Assist in instructing staff on processes and procedures.

· Support leadership security initiatives.

Required Skills:

· BS in Information Assurance, Cybersecurity, Information Systems, or other related technical discipline.

· 8+ years of experience in Cybersecurity, Information Assurance, or Information Technology including at least 5 years of Vulnerabilities Management and Tracking.

· Certified Information Systems Security Professional (CISSP) or other industry certifications.

· Public Trust Suitability.

· Solid understanding of Federal Information System Management Act (FISMA), Office of Management and Budget (OMB) and CISA guidance, metrics, and requirements.

· Strong experience in process improvement.

· Strong written and verbal communication and presentation skills.

· Familiarity with Tenable/Nessus and other security tools.

· Familiarity with RSAM/CSAM or other Governance Risk and Compliance (GRC) tools.

· Experience designing, implementing, and maintaining IT security systems to protect digital assets from malicious cyber-attacks.

· Experience designing, implementing, and maintaining security automation solutions.

· Experience applying vulnerability management principles and best practices.

· Hands-on experience analyzing and responding to security events, such as conducting log analysis, developing queries and analytics, troubleshooting security issues, and correlating diverse data sets.

· Strong understanding of Vulnerability Management program design and development.

· Experience developing reports and dashboards to communicate on security posture across program.

· Ability to provide recommendations and guidance to the customer which enables them to enhance and optimize their information security program.

Location:

· Primary - Telework

· Occasional – Onsite in Germantown, MD

Job Type: Full-time

Pay: $130,000.00 - $150,000.00 per year

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Employee discount
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Professional development assistance
• Referral program
• Relocation assistance
• Tuition reimbursement

Schedule:

• Monday to Friday

Application Question(s):

• Do you reside within 75 miles of Germantown MD

Education:

• Bachelor's (Required)

Experience:

• Cybersecurity: 8 years (Required)
• Vulnerabilities Management: 5 years (Required)

License/Certification:

• CISSP (Required)

Work Location: Remote

abouteureka.com is the go-to platform for job seekers looking for the best job postings from around the web. With a focus on quality, the platform guarantees that all job postings are from reliable sources and are up-to-date. It also offers a variety of tools to help users find the perfect job for them, such as searching by location and filtering by industry. Furthermore, abouteureka.com provides helpful resources like resume tips and career advice to give job seekers an edge in their search. With its commitment to quality and user-friendliness, abouteureka.com is the ideal place to find your next job.