Senior Cybersecurity Vulnerability Engineer

Optimal Solutions Inc.; Chambersburg (Franklin County); Hybrid; USD 70,000 - 110,000; Full time

Job summary

Optimal Solutions Inc. is seeking a seasoned cybersecurity professional to perform Web Vulnerability Scans, assess partner web applications for OWASP Top Ten vulnerabilities, and deliver mitigations and remediation strategies aligned with client policies.

The role requires at least five years of cybersecurity experience, strong documentation, and communication skills, proficiency with PortSwigger BURP DAST and Nessus WAS, MS Office/SharePoint, and a DoD Secret clearance; hybrid schedule in

Qualifications

• Bachelor’s degree or certifications in cybersecurity or IT as listed.
• Minimum five years of cybersecurity experience.
• Strong written and verbal communication skills.
• Proficiency with BURP DAST and Nessus WAS.
• Experience with MS Office Suite and SharePoint.

Responsibilities

• Schedule, coordinate and perform Web Vulnerability Scans (WVS).
• Assess the security posture of Mission Partner's web apps against OWASP Top Ten vulnerabilities; provide mitigations and false positive determinations.
• Create and deliver WVS scan reports to Mission Partners.
• Provide recommendations, guidance, deficiency resolution, and implementation suggestions for correcting web vulnerabilities.
• Communicate and revalidate scan results with all Mission Partners per client policies.
• Facilitate WVS related expedited issue resolution with applicable service desks.

Skills

Cybersecurity experience

Communication

Documentation

Attention to detail

Interpersonal skills

MS Office / SharePoint

Education

Bachelor’s degree in IT/Cybersecurity/CS

Certifications: GICSP, Cloud+, GCED, PenTest+, Security+, GSEC CEH

Tools

PortSwigger BURP DAST

Nessus WAS

Job description

Education:

A Bachelor’s degree in fields such as Information Technology, Cybersecurity, or Computer Science; OR any of the following certifications - GICSP, Cloud+, GCED, PenTest+, Security+, or GSEC CEH.

Certification:

8570 IAT Level II (CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CNS, SSCP).

Clearance:

DoD Secret security clearance

Location:

• Chambersburg PA
• Hybrid work schedule – one day a week onsite plus adhoc as needed.

Responsibilities:

• Schedule, coordinate and perform Web Vulnerability Scans (WVS).
• Assess the security posture of the Mission Partner's web applications and web sites against vulnerabilities such as Cross-Site scripting, Structured Query Language Injection, and the Open Web Application Security Project (OWASP) Top Ten common vulnerabilities; provide mitigations, strategies, and false positive determinations.
• Create and deliver WVS scan reports to Mission Partners
• Provide appropriate recommendations, guidance, deficiency resolution, and implementation suggestions for correcting web vulnerabilities.
• Communicate and revalidate scan results with all Mission Partners in accordance with client policies and procedures.
• Facilitate WVS related expedited issue/problem resolution with applicable service desks.

Required Experience and Skills:

• Minimum 5 years of Cybersecurity experience.
• Proficiency in MS Office Suite products and SharePoint collaborative tools.
• Experience with Portswigger BURP DAST/Nessus WAS.
• Good written and oral communication skills.
• Strong documentation skills.
• Keen attention to detail.
• Strong inter-personal and communication skills (oral and written).