OverviewWe are seeking a Vulnerability Management Specialist to join our team of experts tasked with securing the critical networks and systems our clients depend on. The role is responsible for monitoring and communicating efforts related to CISA cybersecurity alerts (CVE/KEV/CyHy etc.) and tracking the remediation across all mission areas. This role requires timely notification of security tickets and follow-up with mission areas on remediation and other teams.
Responsibilities- Communicate new CISA alerts, CyHy findings, Known Exploited Vulnerabilities (KEVs), vulnerable hosts, and informational ServiceNow tickets to designated mission areas.
- Manage and follow up on Security Incident Request (SIR) tickets, including:
- Understanding CVE/KEV types and associated CISA directives.
- Using Tenable to research and obtain detailed CVE information.
- Utilizing Splunk to generate mission-specific reports, research data, and export findings.
- Tracking remediation progress, updating tickets, and ensuring closure of SIRs.
- Coordinating with CISA on false-positive review requests.
- Manage Vulnerability Disclosure Program (VDP) for internet-facing applications, including:
- Monitoring BugCrowd submissions for new vulnerable hosts or sites.
- Creating and managing SIRs related to VDP findings and coordinating follow-up with the impacted mission areas.
- Weekly notifications (report) on Log4J vulnerabilities for all mission areas and Iranian CVEs and follow up on remediation progress.
- Process and notify monthly CyHy Web Application Scan (WAS) report by mission area and provide trend analysis on vulnerabilities, severity levels, and other issues.
- Prepare and present weekly EPVG briefing materials, including:
- Cyber Hygiene SIR ticket status - Slide
- Risky Service SIR updates
- Vulnerability Disclosure Program ticket status
- CISA Web Application Scanning findings by mission area
- Outstanding SIR tickets from 2023 onward with ongoing remediation follow-up
- Provide weekly status updates to the CDMB team on all open SIR tickets, highlighting any items older than 30 days.
- Participate in SIR ticket call rotation and work on SOPs and process updates.
- Engage with mission areas to address unresolved issues, including web application vulnerabilities and outstanding CVEs.
Qualifications- Must be eligible to obtain a federal security clearance (US Citizenship Required)
- 4-year college degree in Computer Science or related field and 2 years' experience or 5 years' experience in lieu of a college degree.
- Five (5) years of experience in cybersecurity
- Experience demonstrating strong analytical, troubleshooting and problem-solving skills for cybersecurity.
- Knowledge of vulnerability managment lifecycle
- Ability to perform trend analysis on vulnerability data and severity levels
- Strong report writing and data visualization skills for briefings and stakeholder updates
- Experience with Tenable, Nessus and Splunk
- Knowledge of NIST and FISMA guidelines.
- Security+ certification
