Information Systems Security Engineer (ISSE) - Vulnerability Analyst at Systemstechnologyresearch

Systemstechnologyresearch

Woburn, MA·9h ago

Mid LevelFull-timeAWSGo

Salary Range

$102,000 - $138,000 /year

Estimated

This salary is estimated based on similar roles. The actual salary may vary.

About the Role

The Classified Cyber Security team at STR is seeking a cybersecurity professional to join their established Cybersecurity/Risk Management Framework (RMF) program. This role will focus on Vulnerability Management across STR’s classified computer networks, working with various security professionals and system administrators.

Key Responsibilities

→Review, track, and manage IA Vulnerability (IAVA) announcements applicable to STR’s classified networks
→Perform vulnerability/compliance scanning and remediation tracking
→Conduct monthly patch testing for all classified network supported operating systems, applications, and hardware
→Prepare System Impact Assessments from monthly patch testing
→Provide metrics on vulnerability status, patch compliance, and overall risk posture
→Identify improvements to patching processes
→Assist in monitoring and resolving Plan of Action and Milestones (POA&M)
→Conduct reviews and technical inspections to identify security weaknesses
→Support completion of Continuous Monitoring requirements

Requirements

✓Active Secret security clearance with ability to obtain Top Secret, SCI, and/or SAP access (U.S. citizenship required)
✓2-3 years of hands-on technical experience in Information Assurance/Cyber Engineering or System Administration in the Defense Industrial Base (DIB)
✓Experience with Windows Server Update Services (WSUS) and Linux patching
✓Minimum of a DoD 8140/8570 IAT Level II certification (Security+)
✓Knowledge of NIST SP800-53 control implementation
✓Familiarity with DCSA Authorization and Assessment Process Manual/Guide and Joint Special Access Implementation Guide
✓Configuration, certification, and auditing/analysis of Windows/Linux operating systems
✓Experience with IA vulnerability/compliance scanning tools
✓Familiarity with scripting in Windows (PowerShell) and Linux (Bash, Ansible)
✓Excellent communication skills, detail-oriented, and self-starter
✓summaryBullets: [
✓"Manage IA Vulnerability announcements for classified networks",
✓"Perform vulnerability scanning and remediation tracking",
✓"Conduct monthly patch testing for classified systems",
✓"Prepare System Impact Assessments for patch testing",
✓"Identify improvements to patching processes",
✓"Assist in monitoring and resolving POA&M",
✓"Conduct security reviews and technical inspections"
✓]
✓requirementBullets: [
✓"Active Secret security clearance with ability to obtain Top Secret access",
✓"2-3 years experience in Information Assurance/Cyber Engineering",
✓"Experience with WSUS and Linux patching",
✓"DoD 8140/8570 IAT Level II certification",
✓"Knowledge of NIST SP800-53",
✓"Familiarity with DCSA Authorization and Assessment Process Manual/Guide",
✓"Experience with vulnerability scanning tools"
✓]
✓benefitBullets: []