Security Tools Engineer ( Scanning

Peraton drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted and highly differentiated national security solutions and technologies that keep people safe and secure. Peraton serves as a valued partner to essential government agencies across the intelligence, space, cyber, defense, civilian, health, and state and local markets.

Every day, our employees do the can't be done, solving the most daunting challenges facing our customers.

We are Hiring! Our Dept.of Education Porgram is looking to add a Security Tools Engineer to the team. This qulified individual will be under general supervision and supports the Account Security Officer and other Account Security team personnel in Information Assurance and Security activities for the client. Operate vulnerability assessment equipment in support of vulnerability and compliance initiatives. Work with the Security Team to refine current processes and procedures and suggest and implement any new processes that will assist with fulfilling the mission of the current client contract.

Act as the point of contact and subject matter expert for vulnerability scanning/assessment activities. Work with SOC counterparts to coordinate CDM and other scanning activities.

• Prepares vulnerability and compliance reporting, analyzes system impact, updates stakeholders on progress of system hardening efforts
  
  Leads security compliance checklist efforts for system components
  
  Assists in development and implementation of technical security policies
  
  Provides security analysis and consultation services for product, system, and network architecture designs pertaining to vulnerability management tools
  
  Maintains up to date knowledge of IP network architectures
  
  Identifies trends and root causes of system vulnerabilities and configuration settings
  
  Provides risk analysis as required for projects or as necessary with recommended configuration changes
  
  Ensures vulnerability and compliance scanning procedures meet security requirements
  
  Initiates compliance and vulnerability scans using Nessus Security Center tool for configuration and vulnerability management
  
  Defines and updates the Security Configuration Management (SCM) baselines to meet DISA STIG requirements at least semi-annually
  
  Performs any other Information Security duties as assigned
  
  Provides consultation to technical subject matter experts (SMEs) in information security support to including assisting with evidence gathering, preparing technical narratives, and conducting training
  
  Works with SOC counterparts to coordinate CDM and other scanning activities
  
  Ensures program deliverables are met with regard to vulnerability scan reports and SLA requirements.
  
  Specifically, the Security Tools Engineer conducts the following
• Weekly vulnerability scans using Tenable.sc and Fortify WebInspectBOD 18-01 scans and monthly SLA reporting
  - Cyber Scope Report Ad Hoc scanning for OSA
  - Tenable and Fortify Web Inspect Customer  scan requests for Nessus and Fortify Web Inspect
  - Remedy work orders
  
  Monthly Nessus reports for Discovery scans and Certificate infoCDM scanning for databases within the General Support System (GSS)
  Monthly Nipper scans/analysis of network device configuration

Required Qualifications:

• Bachelor's Degreeand a minimum of 5 years of experience. Additional years of experience may be accepted in lieu of the degree.
• 5+ years' experience in IT security
• Experience working with compliance and regulatory program requirements especially FISMA regulated environments
• Experience analyzing network, event and security logs,…