Creates cyber-intelligence tools / methods and performs research and analysis in order to mitigate and eliminate data and cyber security risks. Develops acceptance criteria for cybersecurity architecture. Provide Vulnerability Assessment (VA) support to agency information systems.
- Assist the Government in managing Enterprise Information System Vulnerability Management (ISVM) compliance validation.
- Assist the Government in briefing leadership on current and future vulnerabilities, security policies and industry standards.
- Assist the Government in briefing leadership on most impactful vulnerabilities, configurations, and penetration testing efforts.
- Assist the Government in creating and managing all scans in accordance with the VAT scan standardization documentation.
- Assist the Government in performing regularly scheduled vulnerability assessments using a master schedule as directed.
- Assist the Government in managing, customizing, and maintaining scan policies, zones, and repositories as they relate to the agency network.
- Assist the Government in performing scan functions and review scan results to ensure accurate findings.
- Assist the Government in creating and customizing scan reports and data feeds to be imported / integrated into third party assessment tools.
- Support the coordination of the VA scanning and testing in advance with the system ISSO and the Government Task Monitor (TM) to assure coordination with network maintenance, availability, and operations.
- Coordinate with system owner / ISSM/ ISSO to make any necessary changes to the schedule.
- Assist the Government in maintaining a repository of VA application issues and report application issues to Government VAT Team Lead and SSD Director.
- Travel to be physically on location to perform onsite security assessments of agency facilities, systems, and applications as requested.
Minimum Qualifications- Bachelor's Degree in Computer Science or a related field or equivalent experience.
- Minimum 5 years of professional experience in information assurance, cybersecurity, risk management, or compliance; to include experience with IT vulnerability assessments/management.
- Candidates must be US citizens (no dual citizens) with the ability to pass a federal background investigation in order to be granted access to sensitive information.
Other Job Specific Skills- Familiarity with Zero Trust Architecture Implementation and best practices.
- Must be able to communicate effectively and clearly present technical approaches and findings.
- Exercises a limited degree of latitude in determining technical objectives of assignments.
- Excellent attention to detail.
- Must be able to balance multiple tasks simultaneously.
Compensation RangesCompensation ranges for ASM Research positions vary depending on multiple factors; including but not limited to, location, skill set, level of education, certifications, client requirements, contract-specific affordability, government clearance and investigation level, and years of experience. The compensation displayed for this role is a general guideline based on these factors and is unique to each role. Monetary compensation is one component of ASM's overall compensation and benefits package for employees.
DisclaimerThe preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.
