Cybersecurity Vulnerability Analyst

Node.Digital LLC; Arlington (VA); On-site; Full time

Benefits offered by this job

Medical

Dental

Vision

401K

Three weeks of PTO

10 Paid Holidays

Pre-Approved Online Training

Job summary

A leading cybersecurity consultancy is seeking a Cybersecurity Vulnerability Analyst based in Arlington, VA. The role requires an active Top Secret Security Clearance and 5+ years of experience, focusing on vulnerability analysis for federal clients. Candidates must exhibit strong analytical skills and proficiency in identifying cybersecurity threats and vulnerabilities while working collaboratively. This position offers various benefits including medical, dental, vision, and a 401K plan.

Qualifications

• Active U.S. Citizenship required.
• Must have an active TS/SCI clearance.
• 5+ years of directly relevant experience.

Responsibilities

• Assess and explain cybersecurity vulnerabilities' impact.
• Conduct sector analysis of vulnerabilities using tools.
• Coordinate with VM analysts and leadership for operations.

Skills

Cybersecurity analysis

Risk management

Critical thinking

Analytical skills

Penetration testing

Network protocols knowledge

Understanding of security threats

Education

BS Computer Science or related degree

Tools

SharePoint

ServiceNow

Palo Alto Networks Cortex Xpanse

Job description

Overview

Location: Arlington, VA
Must have an active Top Secret Security Clearance
Node is supporting a U.S. Government customer to provide cybersecurity vulnerability analysis support to reduce the prevalence and impact of vulnerabilities and exploitable conditions across Federal Civilian Executive Branch (FCEB) entities and Critical Infrastructure Key Resources (CIKR). The Cybersecurity Vulnerability Analyst utilizes cybersecurity best practices, risk management techniques, critical thinking, and strong analytical skills to analyze information from multiple sources, synthesize that information, and provide expert analysis to senior customer stakeholders.

Responsibilities

• Utilize creativity and divergent thinking to assess and explain the impact of cybersecurity vulnerabilities on FCEB and CIKR security postures
• Conduct prevalence and sector analysis of vulnerabilities with Attack Surface Management tools
• Review vulnerability reporting to identify potential risks and impacts CIKR and FCEB entities
• Maintain awareness of technical capabilities of Vulnerability Management (VM) Subdivision operational components
• Evaluate technical requirements of VM operational components and recommend paths forward
• Understand and articulate the impact of vulnerabilities to organizations
• Coordinate with VM analysts and leadership to synchronize VM operational activities
• Coordinate with broader Cybersecurity Division (CSD) analysts and leadership to understand CSD operational priorities and activities
• Willingness, ability, and flexibility to assist the government to standup this new mission operations area within VM
• Demonstrated ability to contribute to developing Standard Operating Procedures and Work Instructions as required
• Demonstrated ability to contribute to weekly operation summaries, intelligence analysis summaries, and other cyber intelligence reports

Requirements

• U.S. Citizenship
• Must have an active TS/SCI clearance
• Must be able to obtain DHS Suitability
• 5+ years of directly relevant experience
• Experience as a hands-on cybersecurity analyst (i.e. SOC Analyst or Penetration Tester) is required
• Experience with the analysis and characterization of cyber attacks
• Skilled in identifying different classes of attacks and attack stages
• Knowledge of system and application security threats and vulnerabilities
• Knowledge of basic networking protocols, including TCP/IP, UDP, HTTP/HTTPS, SSH, and DNS, and open security standards and projects, including OWASP
• Knowledge of CVSS and KEV scoring methodology
• Knowledge of general attack stages (e.g., foot printing and scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks, etc.)
• Knowledge of VM scanning, Web Application scanning, and red team processes
• Experience recognizing and categorizing types of vulnerabilities and associated attacks
• Knowledge of Computer Network Defense policies, procedures, and regulations
• Knowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non nation-state sponsored], and third generation [nation-state sponsored])
• Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return-oriented attacks, and malicious code)
• Experience in developing and delivering technical briefings
• Must be able to work collaboratively across physical and virtual locations

Desired Skills

• Understanding of OT/ICS/SCADA technologies and associated vulnerabilities
• Experience with conducting all-source research
• Understanding of MITRE Adversary Tactics, Techniques and Common Knowledge (ATT&CK)
• Experience with:
  • SharePoint
  • ServiceNow
  • Palo Alto Networks Cortex Xpanse

Required Experience/Education

BS Computer Science, Computer Engineering, Computer Information Systems, Cybersecurity, or related degree, or 7+ years experience in cyber incident management experience or cybersecurity experience with a High school diploma.

Desired Certifications

• CompTIA Security+, CEH, CISSP, CISM, CISA, CCSP, CIPP, CPT, CCSS

Company Overview

Node.Digital is an independent Digital Automation & Cognitive Engineering company that integrates best-of-breed technologies to accelerate business impact.

Our Core Values help us in our mission. They include:
Identifying the RIGHT PEOPLE and developing them to their full capabilities.
Our customer's "Mission" is our "Mission". Our MISSION FIRST approach is designed to keep our customers fully engaged while becoming their trusted partner.
We believe in simplifying complex problems with a relentless focus on agile delivery excellence.
Our mantra is "Simple*Secure*Speed" in delivery of innovative services and solutions.

Benefits

• Medical
• Dental
• Vision
• Basic Life
• Health Saving Account
• 401K
• Three weeks of PTO
• 10 Paid Holidays
• Pre-Approved Online Training