Security Tools Engineer ( Scanning)

Peraton; Indianapolis (IN); On-site; USD 86,000 - 138,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Tuition Assistance

Paid Time Off

Retirement Plan

Career Development

Job summary

Peraton is seeking a Security Tools Engineer to support information assurance activities for a government client. You will operate vulnerability assessment tools, prepare reports, and coordinate with SOC to drive CDM and related scanning efforts.

The role requires hands-on experience with Nessus, Tenable.sc, Fortify WebInspect, and regulatory compliance programs (FISMA, NIST). US Citizenship and ability to obtain high-risk trust is mandatory.

Qualifications

• Bachelor's degree plus minimum 5 years IT security experience.
• Experience with compliance requirements in FISMA environments.
• Experience analyzing security logs and IDS alerts.

Responsibilities

• Prepare vulnerability and compliance reports and update stakeholders on hardening progress.
• Lead vulnerability scanning and ensure CDM coordination with SOC and scanning activities.

Skills

IT security

Vulnerability scanning

Nessus

Tenable.sc

AWS Console

Active Directory

Windows Server

DISA STIG

NIST

FISMA

Project management

Education

Bachelor's Degree

Tools

Tenable.sc

Nessus

Fortify WebInspect

AWS Console

Remedy

Job description

:Peraton Overview

Peraton drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted and highly differentiated national security solutions and technologies that keep people safe and secure. Peraton serves as a valued partner to essential government agencies across the intelligence, space, cyber, defense, civilian, health, and state and local markets. Every day, our employees do the can't be done, solving the most daunting challenges facing our customers.

Responsibilities

We are Hiring! Our Dept.of Education Porgram is looking to add a Security Tools Engineer to the team. This qulified individual will be under general supervision and supports the Account Security Officer and other Account Security team personnel in Information Assurance and Security activities for the client. Operate vulnerability assessment equipment in support of vulnerability and compliance initiatives. Work with the Security Team to refine current processes and procedures and suggest and implement any new processes that will assist with fulfilling the mission of the current client contract. Act as the point of contact and subject matter expert for vulnerability scanning/assessment activities. Work with SOC counterparts to coordinate CDM and other scanning activities.

What you will do:

• Prepares vulnerability and compliance reporting, analyzes system impact, updates stakeholders on progress of system hardening effortsLeads security compliance checklist efforts for system componentsAssists in development and implementation of technical security policiesProvides security analysis and consultation services for product, system, and network architecture designs pertaining to vulnerability management toolsMaintains up to date knowledge of IP network architecturesIdentifies trends and root causes of system vulnerabilities and configuration settingsProvides risk analysis as required for projects or as necessary with recommended configuration changesEnsures vulnerability and compliance scanning procedures meet security requirementsInitiates compliance and vulnerability scans using Nessus Security Center tool for configuration and vulnerability managementDefines and updates the Security Configuration Management (SCM) baselines to meet DISA STIG requirements at least semi-annuallyPerforms any other Information Security duties as assignedProvides consultation to technical subject matter experts (SMEs) in information security support to including assisting with evidence gathering, preparing technical narratives, and conducting trainingWorks with SOC counterparts to coordinate CDM and other scanning activitiesEnsures program deliverables are met with regard to vulnerability scan reports and SLA requirements.Specifically, the Security Tools Engineer conducts the following
• Weekly vulnerability scans using Tenable.sc and Fortify WebInspectBOD 18-01 scans and monthly SLA reporting - CyberScope ReportAd Hoc scanning for OSA - Tenable and Fortify WebInspectCustomer scan requests for Nessus and Fortify WebInspect - Remedy work ordersMonthly Nessus reports for Discovery scans and Certificate infoCDM scanning for databases within the General Support System (GSS)Monthly Nipper scans/analysis of network device configuration

Qualifications

Required Qualifications:

• Bachelor's Degreeand a minimum of 5 years of experience. Additional years of experience may be accepted in lieu of the degree.
• 5+ years' experience in IT security
• Experience working with compliance and regulatory program requirements especially FISMA regulated environments
• Experience analyzing network, event and security logs, and/or IDS alert logs
• Proven project management and organizational skills, specifically managing multiple concurrent projects
• Technical experience in the following:
• Vulnerability scanning tools (Tenable.sc and Nessus) AWS ConsoleUnderstanding of Microsoft Windows Server and Desktop Operating Systems Knowledge of Microsoft Active DirectoryVulnerability and Compliance Scanning of AWS RDS, Microsoft SQL Server and Oracle, PostgreSQL Databases, Firewalls and AWS AccountsBasic knowledge of Red Hat Enterprise Linux (RHEL)Industry best practice security standards (e.g., DISA STIG, CIS, NIST, etc.)Must be a US Citizen.
• Must be able to obtain and maintain the required High Risk Public Trust, level 6C

Preferred Qualifications:

• Excellent analytical, problem solving, and decision-making skills, applied with a solution-focused attitude
• Active Public Trust Clearance
• Fortify experience

Benefits:

At Peraton, our benefits are designed to help keep you at your best beyond the work you do with us daily. We're fully committed to the growth of our employees. From fully comprehensive medical plans to tuition reimbursement, tuition assistance, and fertility treatment, we are there to support you all the way. #LI-ET1

Target Salary Range

$86,000 - $138,000. This represents the typical salary range for this position based on experience and other factors.

EEO

An Equal Opportunity Employer including Disability/Veteran.

Benefits

• Paid Time-Off and Holidays
• Retirement
• Life & Disability Insurance
• Career Development
• Tuition Assistance and Student Loan Financing
• Paid Parental Leave
• Additional Benefits
• Medical, Dental, & Vision Care