Network Vulnerability Analyst | Secret clearance at General Dynamics Information Technology San[...]

General Dynamics Information Technology; San Diego (CA); On-site; USD 100,000 - 140,000; Full time

Benefits offered by this job

401(k) plan with company match

Health, dental, and vision coverage

Paid vacation and holidays

Paid parental, military, bereavement,并

Jury duty leave

Disability, life, and travel insurance

Professional growth—paid education and

Job summary

General Dynamics Information Technology seeks a Network Vulnerability Analyst in San Diego, CA to support RDT&E for the Naval Information Warfare Center. You will perform penetration testing, validate vulnerabilities, and help with remediation and procedures to improve security posture.

Qualified candidates hold an active Secret clearance, 4+ years of experience, and hands-on with ACAS, Kali, Metasploit, Burp Suite, Nessus, and related tools. Onsite in San Diego with US citizenship required.

Qualifications

• Active Secret clearance is required.
• 4+ years of relevant experience in vulnerability assessment and penetration testing.
• Experience with vulnerability and configuration scans using ACAS, SCAP Compliance Checker, McAfee Policy Auditor and similar tools.
• Experience with penetration testing targeting web applications, infrastructure, and endpoints.
• Familiarity with security testing environments and tools including Kali, Metasploit, Burp Suite, Wireshark, and Fiddler.
• Knowledge of DoD STIGs and ability to test and implement patches and countermeasures.
• Proficiency in scripting (PowerShell, Bash, or Python) and working with virtual machines.

Responsibilities

• Perform penetration testing against a variety of applications using customer-provided tools.
• Perform proof of concept on new exploits to determine vulnerability viability.
• Ensure signature-based scanning tools are operational.
• Draft and review Standard Operating Procedures and Proofs of Concept.
• Prepare and assist with Command Cyber Readiness Inspections.

Skills

Penetration testing

Vulnerability assessment

Kali

Metasploit

Burp Suite

Nessus

PowerShell

Python

Education

Bachelor's Degree in Computer Science/Information Systems/Engineering

CompTIA Security+ CE

Tools

ACAS

SCAP Compliance Checker

McAfee Policy Auditor

Nessus Network Monitor

Kali Linux tools

Burp Suite

Wireshark

Fiddler

Puppet

Job description

Network Vulnerability Analyst – Secret Clearance – San Diego, CA

Seize your opportunity to make a personal impact as a Network Vulnerability Analyst supporting the Research, Development, Test, and Evaluation (RDT&E) at the Naval Information Warfare Center in San Diego, CA.

Responsibilities

• Perform penetration testing against a variety of applications using customer‑provided tools.
• Perform proof of concept on new exploits to determine if supported networks are vulnerable.
• Ensure signature‑based scanning tools are operational.
• Draft and review Standard Operating Procedures and Proofs of Concept.
• Prepare and assist with Command Cyber Readiness Inspections.

Required Qualifications

• Security Clearance Requirements: Active Secret clearance.
• Required Experience: 4+ years of relevant experience.
• Experience with vulnerability and configuration compliance scans using ACAS, SCAP Compliance Checker, McAfee Policy Auditor and similar tools.
• Experience with penetration testing that identifies weaknesses in web applications, supporting infrastructure, and endpoints.
• Knowledge of security testing environments and tools including Kali, Metasploit, Burp Suite, Wireshark, and Fiddler.
• Experience enumerating vulnerabilities and performing exploits (remote code execution, privilege escalation, XML external entity, XSS, SQL injection, man‑in‑the‑middle, session hijacking, CSRF).
• Experience with passive vulnerability/network monitoring using Nessus Network Monitor or similar tools, packet capture, session data, and event correlation.
• Experience assisting system administrators to test and implement patches, hot‑fixes, and countermeasures.
• Familiarity with collaborating with infrastructure teams to drive remediation through risk/threat‑based assessments.
• Knowledge of DoD IAVM deadlines, announcements, assess applicability, and plan responses.
• Experience researching and documenting remediation strategies and building custom reports for data calls.
• Ability to analyze vulnerabilities, implement controls, and establish infrastructure to detect and contain vulnerabilities.
• Knowledge of tools such as Elastic Stack, SQL, stream editors, spreadsheet pivot tables, LDAP queries, Unix/Linux CLI, Nmap, tcpdump, Wireshark, shell scripting, and Puppet.
• Experience with Blue Team tools.
• Knowledge of current vulnerability trends and technologies, prioritization of remediation, and recommendations to improve overall security posture.
• Experience with DoD STIGs.
• Scripting experience (PowerShell, BASH, or Python preferred).
• Experience with virtual machines (vSphere, VirtualBox, KVM, QEMU).
• Strong verbal and written communication skills.
• Required Certification: CompTIA Security+ CE.
• Education: Bachelor's Degree in Computer Science, Information Systems, Engineering or another related technical discipline.
• Location: Onsite in San Diego, CA.
• US Citizenship: Required.

Preferred Qualifications

• Knowledge of Burp Suite security tools.
• Experience with Kali Linux tools such as nMap, TCPDump, Wireshark.
• Knowledge of web development and HTML structure.
• Working knowledge of the OSI network model and traffic flow.
• Knowledge of Windows Server core elements (Domain Controller, Active Directory, Registry, GPO, DISM, SCCM).
• Medium to advanced knowledge of network configuration for switches and routers.
• Basic understanding of vulnerability research and exploitation.
• Basic knowledge of physical security.
• Basic knowledge of hardware exploitation.
• Basic knowledge of Cloud core elements.
• Experience in penetration testing.

Benefits

• 401(k) plan with company match.
• Comprehensive health, dental, and vision coverage with Health Savings Accounts.
• Paid vacation, holidays, and flexible work weeks.
• Paid parental, military, bereavement, and jury duty leave.
• Short‑term and long‑term disability, life, accidental death, and business travel insurance.
• Professional growth opportunities including paid education and certifications.

Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans