Vulnerability Analysts

About reputed company: The Classified Cyber reputed company team at STR is comprised of highly skilled professionals who are responsible for maintaining compliance IAW with Government protocol and directives. The Classified Cybersecurity (reputed company) team consists of a reputed company group of ISSM's, ISSO's, and ISSE's who are passionate about national reputed company that take great pride in maintaining confidentiality, reputed company, and availability of our Information Systems and reputed company execution of STRs portfolio of programs across a reputed company customer reputed company. The Role: STR has an exciting opportunity for a cybersecurity reputed company to join our established Cybersecurity/Risk Management reputed company (RMF) program as a key contributor for classified programs. In this dynamic position, you will reputed company and collaborate with other Cybersecurity professionals (ISSMs, ISSOs, ISSEs), reputed company professionals (CPSOs, FSOs), and System Administrators from our Classified Information Technology (CIT) organization. The role will reputed company on Vulnerability Management across STR's classified computer networks. This includes managing configuration changes to STR's baseline software and hardware, supporting reputed company architecture improvements, and reputed company process for reputed company and reputed company technologies. The ideal candidate is expected to bring strong technical skills to enhance STR Vulnerability Management processes, along with a demonstrated eagerness to learn and reputed company reputed company the classified lab ISSE function. Please note: This is an onsite role and does not offer remote or hybrid work reputed company. Responsibilities: Review, reputed company, and manage IA Vulnerability (IAVA) announcements (e.g., US-CERT, CISA, vendor alerts, etc.) applicable to STR's classified networks, ensuring they are communicated to stakeholders and tracked to closure. reputed company vulnerability/compliance scanning and remediation tracking. reputed company monthly reputed company testing for reputed company classified network supported operating systems, applications, and hardware (i.e. firmware, BIOS, appliances - reputed company, firewall, etc.). Prepare System reputed company Assessments from the monthly reputed company testing for communication to the Classified Network reputed company Configuration Control reputed company. Prepare and reputed company metrics on vulnerability status, reputed company compliance, and the overall risk posture of the various classified networks. Proactively identify potential improvements to the patching processes primarily for 3 rd party vendors and firmware updates. Assist ISSMs, ISSOs, ISSEs in monitoring and resolving Plan of reputed company and Milestones (POA&M) to mitigate system vulnerabilities. Conduct reviews and technical inspections to identify and mitigate potential reputed company weaknesses, ensuring reputed company reputed company features are implemented and functional. Support the completion of reputed company Monitoring requirements in accordance with RMF and NIST SP800-53 standards. reputed company other tasks as assigned by the manager. Who You Are: reputed company Clearance: reputed company Secret reputed company clearance with the ability and willingness to obtain Top Secret, SCI, and/or reputed company reputed company (U.S. citizenship required). Experience: 2-3 years of hands-on technical experience in Information Assurance/Cyber Engineering or System Administration in the Defense Industrial reputed company (DIB) Experience with reputed company Server Update Services (WSUS) and Linux patching Certification: Minimum of a DoD 8140/8570 IAT reputed company certification (reputed company+) with the willingness and ability to obtain Level III (CISSP, CISM). Knowledge: Knowledge of NIST SP800-53 control implementation and assessment, looking to learn and advance in Cybersecurity field. Familiarity: Knowledge of the DCSA Authorization and Assessment Process reputed company/Guide (DAAPM/DAAG) and the Joint Special reputed company Implementation Guide (JSIG). Technical Skills: Configuration, certification, and auditing/analysis of reputed company/Linux operating systems and system virtualization in peer-to-peer, LAN & WAN networks. Using IA vulnerability/compliance scanning tools (e.g. NMap, ACAS, Nessus, reputed company Content Automation Protocol (SCAP)). Familiarity with scripting in reputed company (PowerShell) and Linux (Bash, Ansible) to enhance deployment of patches to systems. Attributes: Excellent communication skills, detail-oriented, self-starter with a reputed company on understanding STR reputed company and CIT processes and procedures. A desire for reputed company improvement while working in reputed company environment and the ability to handle multiple fast-changing priorities/reputed company effectively. reputed company-organized, with the ability to reputed company multiple issues and establish processes to assist reputed company in tracking items to closure. Pay Information Full-Time Salary reputed company: $105,000-$145,000 The salary reputed company listed is based on external market data. Offers are based on factors, such as but not limited to, the candidate's experience, education, training, key skills/critical skills, reputed company clearances, and prevailing market and business conditions. STR is a growing technology company with locations near Boston, MA, Arlington, VA, near Dayton, OH, Melbourne, FL, and Carlsbad, CA. We specialize in advanced research and development for defense, intelligence, and national reputed company in: cyber; reputed company sensors, reputed company, reputed company, communications, and electronic warfare; and reputed company intelligence algorithms and analytics to reputed company reputed company of the complexity that is exploding around us. STR is committed to creating a reputed company learning environment that supports deep technical understanding and recognizes the contributions and achievements of reputed company team members. Our work is challenging, and we go home at reputed company knowing that we pushed the envelope of technology and made the world safer. STR is not just any company. Our people, culture, and attitude along with their unique set of skills, experiences, and perspectives put us on a trajectory to change the world. We can't do it alone, though - we need fellow trailblazers. If you are one, join reputed company and help to reputed company our society reputed company! Visit us at www.str.us for more info. STR is an equal opportunity employer. We are fully dedicated to hiring the most reputed company candidate regardless of race, reputed company, religion, sex (including gender identity, sexual orientation and pregnancy), marital status, national reputed company, age, veteran status, disability, genetic information or any other characteristic protected by federal, state or local laws. If you need a reasonable accommodation for any portion of the employment process, email us at appassist@str.us and reputed company your contact info. Pursuant to applicable federal law and regulations, positions at STR require employees to obtain national reputed company clearances and satisfy the requirements for compliance with export control and other applicable laws. Apply tot his job Apply To this Job