Vulnerability Assessment Analyst

Vulnerability Assessment Analyst

Location:

Must be local to Richardson, TX and Greenville, TX

Clearance:
Secret with ability to obtain and maintain TS/SCI.

The Decision Advantage Business Area within Defense at Leidos has an opening for a highly qualified Secret cleared Vulnerability Assessment Analyst. This is an exciting opportunity to bring your experience to support all-domain large-scale weapon systems, Information Technology Systems, and Command and Control Systems to realize the Department of Defense Joint All-Domain Command and Control (JADC2). In this role you will support the Advanced Battle Management System (ABMS) Digital Infrastructure (DI) Processing Node (PN) team to design and implement solutions that can be delivered at speed, scale, and with the necessary security to deliver operational advantages to the joint warfighter.

ABMS is a top modernization priority for the Department of the Air Force and will be the backbone of a network-centric approach to battle management in partnership with all the services across JADC
2. This position will work closely with Program Managers, domain engineers, and Government counterparts across Government and Industry partners.

Primary responsibilities:

• Support the integration of security solutions by helping to document and implement configuration settings and requirements.
• Contribute to ensuring security changes are technically sound and comply with RMF, DoD, and NIST standards.
• Help identify and address gaps in cyber tools and processes and assist with the implementation of new solutions.
• Learn and apply DISA STIGs by assisting with their implementation and verification on various systems.
• Contributes to security monitoring and incident response using SIEM technologies.
• Collaborate with team members to communicate and document security configurations and requirements.
• Maintain familiarity with software development product lines.

Required Qualifications:

• BS degree and 8 – 12 years of prior relevant experience. Additional years of relevant experience will be considered in lieu of degree.
• Must be local to Richardson, TX and Greenville, TX
• Must have an active and current Secret Clearance with ability to obtain and maintain TS/SCI.
• Security Expertise:
  Required DoD 8140 IAT Level II compliant certification such as CompTIA Security+
• Technical Proficiency:
  Over two years of experience in systems, OS security or network security. Proficient in Tenable Nessus, Nessus Manager, and Tenable.sc, or other vulnerability scanning and management. Basic hands-on experience with command-line interfaces on various operating systems, including Linux and Windows. Understands basic command in using Bash and Power Shell for scripting and automation.
• Compliance &
  
  Risk Management:
  
  Basic working knowledge of DISA STIGs, including the ability to apply, verify, and document compliance. Understands the basics of Risk Management Framework (RMF) process, including the creation of technical artifacts.
• Problem-Solving &
  
  Collaboration:
  
  Demonstrated analytical skills for troubleshooting security and connectivity issues. A proven collaborator with excellent communication skills, able to work effectively with cross-functional teams.

Additional Qualifications/Certifications

• Familiarity with other vulnerability scanning or security tools (e.g., Anchore, OpenSCAP, Syft, Grype, PowerSTIG, Evaluate-STIG, STIGviewer).
• Experience with scripting or automation to enhance scanning and reporting processes.
• Experience with specific operating systems (Windows, Linux) and network device configurations and navigating and interacting via command line.
• Knowledge of containerization platforms like Docker and container orchestration tools such as Kubernetes, Open Shift, or similar.
• Other relevant cybersecurity certifications like SSCP, CCSP, CEH, Pen Test+, Cloud+, GIAC, GCED, GCIH or CySa+ are a plus.
• TS/SCI clearance