Job Description:IT Security Engineer / Vulnerability Scanning Expert to support the United States Department of Agriculture (USDA), Office of the Chief Information Officer (OCIO), Cybersecurity and Privacy Operations Center (CPOC). Information Security Center (CPOC) serves and supports USDA Agencies and Offices by helping to protect mission-critical assets and information, thereby securing the Country diverse food, agriculture, rural and natural resources programs. The CPOC monitors and protects USDA's systems by keeping abreast of new threats to both existing and new technologies and continually monitoring the USDA information technology enterprise to ensure USDA Agencies and Offices computing environments remain secure. The OCIO provides leadership in the development, implementation, and management of security solutions into the everyday business of the Department to ensure the confidentiality, integrity, and availability of the United States Department of Agriculture (USDA) data and information systems
OCIO security functions include, but are not limited to: a) Vulnerability scanning b) Vulnerability tool administration c) Vulnerability reporting d) Vulnerability remediation e) Linux and Windows administration
Duties/ Responsibilities: - Runs vulnerability and compliance scans for all types of systems in USDA
- Updates Nessus scanners and Tenable Security Centers to latest released versions
- Troubleshoots issues with scanning related to network, endpoints, or scanner
- Investigate potential false positive vulnerabilities
- Develops and maintain provisioning scripts to facilitate tasks
- Creates and administers job queries, and custom reports
- Troubleshoots failed deployments and agent health issue
- Creates back-end processes and maintenance to keep the system running healthy, including changes to the core components and settings, software delivery, agent behavior and heath, reporting, and software compliance
- Monitors application health and troubleshoots errors with vendor support
- Performs general system administration and troubleshooting
- Exercises a high degree of responsibility for the processes, systems, and tools you create and manage
- Conducts independent security control assessment to confirm and establish that controls are implemented correctly
- Evaluates new technologies and leads cross-organizational teams to analyze, select, implement, and integrate these technologies with existing IT services
- Anticipates future IT service needs and investigates the potential of practical solutions
- Develops strategies to mitigate end-user issues at an enterprise level
- Takes initiative to document standard operating procedures, best practices, and automate solutions
Required Skills/Abilities- Experience managing multi-platform Client Security Tools (Tenable.SC, Tenable.VM, Nessus, Nessus Agent, Tenable.OT, Invicti Web App Scanning)
- Experience in design and maintenance of vulnerability scanning technologies in an enterprise environment
- Experience with basic Linux commands and some Windows administration
- Experience with Splunk SIEM queries
- Experience in producing repeatable, reliable, scalable systems
- Some experience with PowerShell writing scripts and automating processes
- Working knowledge in services such as DHCP, DNS, IIS, MS-SQL, and NPS
- Must be comfortable working with mission critical and sensitive systems
- Ability to communicate and present ideas to customers and management
- U.S Citizenship required
Nice to Have Skills- Bachelor's Degree
- MCSE for other Microsoft certifications
- CompTIA Security+
- Experience managing macOS or Linux Agile Scrum or Kanban experience
Education and Experience:3 years of relevant experience
US Citizen
Travel RequirementClearance Requirement:Salary Range: 75k - 100k annually
