Senior Vulnerability Engineer

2 нед. назад

USASeniorOnsite

vulnerability managementpatch managementauditingcompliance

Senior role to support and manage Vulnerability Management Program for a mission critical customer.

Be Challenged and Make a Difference     In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At , we provide unmatched value to our customers and employees through innovative solutions and an engaging culture.  Description of Task to be Performed: is seeking a Senior Vulnerability Engineer to join our team and support our mission critical customer in Reston, VA. As our Senior Vulnerability Engineer, you will provide Subject Matter Expertise support to maintain Vulnerability Management Program requirements including, but not limited to, maintaining the patch repository, issuing alerts and bulletins, and tracking compliance. Additional responsibilities would include coord

Clearance: Top Secret SCI, Counterintelligence (CI) Polygraph
Education: Bachelor’s degree in Computer Science or relevant field and 8+ years of experience related to specific functional area. (May substitute Master’s degree in lieu of 2 years of experience).
Certifications: CySA+ or equivalent IAT Level II certification
Location: 100% on-site position in Reston, VA.
Experience:
Working collaboratively across cross-functional teams of all experience levels.
Detailed knowledge of system security vulnerabilities and remediation techniques, including testing and the development of exploits.
Detailed technical knowledge in security engineering, system and network security, authentication, and security protocols.
Skilled in risk management, business risk analysis, and making complex business/risk trade-off recommendations and decisions.
Experience in penetration testing and vulnerability analysis in modern technologies such as cloud, mobile, wireless, and cross domain solutions.
In depth knowledge and experience working with Assured Compliance Assessment Solution (ACAS) scanning environments.
Thorough understanding of DevSecOps Pipeline scanning in supporting development and alerting thresholds.
Solid understanding of Penetration Testing environments and Cloud tools.
Ability to provide recommendations for enhancing Detection and Alerting thresholds and Insider Threat capabilities.

Security certifications: Security+, CCNA Security, CySA+, SSCP, CCSP, or equivalent certification
AWS, Cloud certifications
4+ years experience with Tenable
Strong experience and ability to present technical concepts and updates to senior leaders