Cyber Security Specialist - Vulnerability Analyst

Apogee Engineering, LLC; Bellevue Second IV Precinct (NE); On-site; USD 110,000 - 150,000; Full time

Job summary

Apogee Engineering, LLC seeks a Cyber Security Specialist II - Vulnerability Analyst to support AFNWC/NCC at Offutt AFB, NE. You will prioritize vulnerabilities by severity, coordinate remediation with PST/IST, and maintain documentation of the vulnerability posture.

Ideal candidates hold DoD RMF experience, TS/SCI eligibility, and CISSP or DoD 8140 Level II; a High School Diploma is required with significant DoD exposure. On-site requirement with no travel.

Qualifications

• Must be a US citizen.
• Must possess and maintain a TS w/SCI eligibility.
• CISSP or equivalent IAM II or DoD 8140 Level II certification.
• High School Diploma required; 15 years of relevant experience.
• 5 years direct DoD experience with RMF/IA frameworks.
• Knowledge of NIST 800-53 and DoD RMF tools (eMASS/XACTA).

Responsibilities

• Review findings from security tools and prioritize remediation.
• Provide remediation guidance to PST and IST engineering teams.
• Actively track and meet IAVM deadlines.
• Track findings from identification through closure.
• Offer analytical security recommendations to teams, boards, and clients.
• Develop and maintain security baselines and documentation.
• Engage in technical working groups to recommend secure configurations.
• Coordinate with IT staff to implement effective solutions.
• Provide risk analysis for vulnerabilities, incidents, and change requests.

Skills

Vulnerability analysis

Communication

Security policy

Education

High School Diploma

Bachelor’s degree preferred

Tools

eMASS

XACTA

Job description

Overview

Apogee has an exciting new opportunity for a Cyber Security Specialist II- Vulnerability Analyst in support of the Air Force Nuclear Weapons Center Combatant Command, Command and Control (C2) Division (AFNWC/NCC).

The Rogue Blue Software (RBS) Vulnerability Analyst must possess the technical and administrative skills needed to prioritize findings by severity, impact, and exploitability, communicate remediation requirements clearly to technical teams, and maintain the documentation necessary to demonstrate a controlled vulnerability posture. They would be responsible for the following activities, as well as supporting the other RBS Cyber Support Team (CST) activities

This is a full-time position located at Offutt AFB, NE

Responsibilities

• Consistently review findings for the security tools
• Develop and provide structures and prioritized remediation guidance to the RBS (Platform Services Team (PST) and Infrastructure Services Team (IST) engineering teams
• Actively track and ensure IAVM deadlines are met
• Track and manage all findings from identification through closure
• Provide analytical and technical security recommendations to other team members, oversight boards, and clients
• Identify requirements, based upon need or as the result of a security issue that could put organizations' systems at risk
• Create, maintain, and documents security baselines
• Active member in technical working groups to recommend effective security configurations
• Develop documentation to support ongoing security systems operations, maintenance, and specific problem resolution
• Work with and coordinate appropriate IT staff to implement solutions that will meet or exceed customer expectations
• Provide risk analysis for vulnerabilities, incidents, and change requests

Qualifications

Minimum Experience:

Citizenship: Must be a US citizenClearance: Must possess and maintain a TS w/SCI eligibilityCertifications: CISSP or equivalent IAM II or DOD 8140 Level II

Education: High School DiplomaYears of Experience: Minimum of 15 years of relevant experience to include:

• 5 years directly supporting the DoD
• Strong knowledge and experience applying DoDD 8500.1 Information Assurance, DoDD 8520.1 Protection of SCI, DoDI 8510.01 Risk Management Framework (RMF) for DoD Information Technology, DoD 8570.01M Information Assurance Workforce Improvement Program, and DoDI 8580.1 Information Assurance in the Defense Acquisition Process used for the analysis of user, policy, regulatory, and resource demands

Preferred Qualifications:

Education: Bachelor's degree

Years of Experience: 10years of relevant experience

• Minimum of 3 years providing direct support to the DoD
• Knowledge and experience with NIST 800-53 and DoD Risk Management Framework tools (eMASS/Xacta)

Location: Offutt AFB, NEOn-site/Hybrid/Remote: On-Site

Travel: None