Senior Database Vulnerability Analyst

PD Inc; Maryland; On-site; USD 100,000 - 130,000; Full time

Benefits offered by this job

401K

Health care

Paid time off

Sponsorship for security clearance

Free parking

Job summary

PD Inc is seeking a Senior Database Vulnerability Analyst to support cybersecurity management in a DoD environment at Fort Meade, MD. Requires active Secret clearance, DoD-focused expertise, and 8570/8140 certification with 5+ years of Oracle/SQL/DB2 experience.

Position is full-time, on-site at Fort Meade, with benefits including 401K, healthcare, paid time off, and potential security clearance sponsorship. U.S. citizen required.

Qualifications

• Bachelor's degree or equivalent work experience.
• Five+ years of relevant/recent experience with Oracle, SQL, MySQL, or DB2 and cybersecurity.
• Current 8570/8140 requirement certification.
• Active Secret Clearance.

Responsibilities

• Serve as an application technical specialist for assets connected to isolated environments, NIPRNet, and SIPRNet to support cybersecurity and IT services.
• Review, identify, and report problems with installation and operations of application instances and security controls.
• Determine impact and risk of change requests and participate in CAB meetings for cyber oversight of database changes.
• Recommend security countermeasures to mitigate identified application risks.
• Identify, monitor, analyze, report, and brief status of vulnerabilities.
• Assess, audit, review, analyze, validate, and report SRG and STIG vulnerabilities and ensure controls are implemented.
• Review and validate cyber tools installation on assets and report deficiencies.
• Provide vulnerability reports and audits as deliverables.

Skills

Oracle/SQL/DB2 experience

Cybersecurity

Security clearance readiness

Education

Bachelor's degree

Job description

Job Title: Senior Database Vulnerability Analyst

Location: Fort Meade, MD 20755

Clearance Level: Active Secret Clearance

Job Type: Full-Time

Must be U.S. Citizen

PD Inc International is seeking an experienced and mission-driven Senior Database Vulnerability Analyst to provide Cybersecurity Management support in a U.S. government (DoD) environment.

Education Requirement

• Bachelor's degree or equivalent work experience

Years of Experience

• Five + years of relevant/recent experience with Oracle, SQL, MySQL, or DB2 and cybersecurity.

Certification Requirements

• Current 8570/8140 requirement certification

Clearance Requirements

• Active Secret Clearance

Requirements

• Serve as an application technical specialist for assets connected to isolated environments, NIPRNet, and SIPRNet to support cybersecurity and IT services.
• Review, identify, and report problems with the installation and operations of application instances to include system options, software used and not used, default security controls that are enabled, disabled, or bypassed, and system wide options or parameters that may create security vulnerabilities.
• Determine the impact and risk of submitted change requests prior to implementation and participate in change advisory board (CAB) meetings (up to daily) to provide cyber oversight for database changes that affect the level of risk.
• Recommend security countermeasures to mitigate identified application risks.

Application Vulnerability Analysis

• Identify, monitor, analyze, report, and brief status of vulnerabilities.
• Ensure high risk and high severity vulnerabilities are managed with increased visibility and escalated.
• Analyze, validate, monitor, and report compliance status of DoD and DISA directives and orders.
• Create, maintain, and provide automated and customized vulnerability reports.
• Analyze mission requirements and organizational feedback to improve vulnerability reports and processes.
• Provide recommendations for application vulnerability analysis, guidance, deficiency resolution, and implementation suggestions to DISA customers and Mission Partners.

Application Compliance Validation and Support

• Assess, audit, review, analyze, validate, and report database Security Requirements Guide (SRG) and STIG vulnerabilities, and ensure security controls are implemented within databases IAW DoD, DISA and cybersecurity policies and procedures.
• Evaluate discrepancies as they relate to policy, orders, and database SRG and/or STIGs, and document recommended additions, deletions, or changes.
• Identify and report the need to add technical guidance for modification of policies and orders.
• Review and validate the installation and configuration of cyber tools on assets, and report deficiencies.
• Review database SRG and/or STIGs as updates are released, and report changes with the potential to have significant impact.
• Determine the impact and risk of submitted change requests prior to implementation and participate in meetings to provide cyber oversight for web changes that affect the level of risk.
• Recommend security countermeasures to mitigate identified web risks.
• Participate in audits and provide documentation (up to daily).

Deliverables

• Daily/weekly/monthly/quarterly/annual vulnerability analysis reports
• Also includes Deliverables that apply to all tasks listed in section 6, Performance Requirements.

Benefits: Highly competitive salary, 401K, health care, paid time off, no-limit student loan forgiveness (merit based), sponsor new/qualified employees for security clearance, casual dress code, free parking, corporate discounts, and gym memberships.