Senior Unix and Linux Vulnerability Analyst

PD Inc; Maryland; On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Competitive salary

401K

Health care

Paid time off

Student loan forgiveness (merit based)

Security clearance sponsorship

Casual dress code

Free parking

Corporate discounts

Gym memberships

Job summary

PD Inc International is seeking a Senior Unix and Linux Vulnerability Analyst to support U.S. government cybersecurity operations at Fort Meade, MD.

You will identify and report vulnerabilities in UNIX, Linux, and related assets, assess security controls, and explain risk implications to stakeholders. Responsibilities include monitoring, validating compliance with DoD directives and DISA STIGs, delivering automated vulnerability reports, and advising DISA customers and partners on remediation

Qualifications

• Five+ years of experience with UNIX (HP-UX, Solaris or AIX) or Linux (RedHat) and cybersecurity.
• Three+ years of experience with Microsoft Office products.

Responsibilities

• Review, identify, and report problems with UNIX/Linux assets, including system options, software usage, security controls, and potential vulnerabilities.
• Determine impact and risk of submitted change requests; participate in CAB meetings to provide cyber oversight for UNIX/Linux changes.
• Recommend security countermeasures to mitigate UNIX/Linux risks.

Skills

UNIX/Linux

MS Office

Education

Bachelor's degree or equivalent

Job description

Senior Unix and Linux Vulnerability Analyst

Job Title: Senior Unix and Linux Vulnerability Analyst

Location: Fort Meade, MD 20755

Clearance Level: Active Secret Clearance

Job Type: Full-Time

PD Inc International is seeking an experienced and mission-driven Senior Unix and Linux Vulnerability Analyst to provide Cybersecurity Management support in a U.S. government (DoD) environment.

Education Requirement

• Pursuing bachelor's degree or equivalent work experience

Years of Experience

• Five+ years of relevant/recent experience with UNIX (HP-UX, Solaris or AIX) or Linux (RedHat) and cybersecurity.
• Three+ years of relevant/recent experience with Microsoft Office Products.

Certification Requirements

• Current 8570/8140 requirement certification

Clearance Requirements

• Active Secret Clearance

Requirements

Subtask 1 – UNIX and Linux Specialist Support.

Serve as a UNIX and Linux technical specialist for assets connected to isolated environments, NIPRNet and SIPRNet to support cybersecurity and IT services.

Review, identify, and report problems with the installation and operations of UNIX and Linux assets to include system options, software used and not used, default security controls that are enabled, disabled, or bypassed, and system wide options or parameters that may create security vulnerabilities.

Determine the impact and risk of submitted change requests prior to implementation and participate in CAB meetings to provide cyber oversight for UNIX and Linux changes that affect the level of risk.

Recommend security countermeasures to mitigate identified UNIX and Linux risks.

Subtask 2 – UNIX and Linux Vulnerability Analysis.

• Identify, monitor, analyze, report, and brief status of J-9 HaC vulnerabilities.
• Ensure high risk and high severity vulnerabilities are managed with increased visibility and escalated.
• Analyze, validate, monitor, and report compliance status of DoD and DISA directives and orders.
• Create, maintain, and provide automated and customized vulnerability reports.
• Analyze mission requirements and organizational feedback to improve vulnerability reports and processes.
• Provide recommendations for UNIX and Linux vulnerability analysis, guidance, deficiency resolution, and implementation suggestions to DISA Customers and Strategic Partners.

Subtask 3 – UNIX and Linux Compliance Validation and Support.

• Assess, audit, review, analyze, validate, and report UNIX and Linux SRG and STIG vulnerabilities, and ensure security controls are implemented within UNIX and Linux IAW DoD, DISA and cybersecurity policies and procedures.
• Evaluate discrepancies as they relate to policy, orders and UNIX and Linux SRG and/or STIGs, and document recommended additions, deletions or changes.
• Identify and report the need to add technical guidance for modification of policies and orders.
• Review and validate the installation and configuration of cyber tools on assets, and report deficiencies.
• Review UNIX and Linux SRG and/or STIGs as updates are released, and report changes with the potential to have significant impact.
• Conduct audits and provide documentation.

Subtask 4 – UNIX and Linux Network Monitoring Software Oversight.

Review, coordinate, approve temporary use, and verify removal of network monitoring software for troubleshooting on UNIX and Linux assets IAW DISA policy.

Deliverables:

• Daily/weekly/monthly/quarterly/annual vulnerability analysis reports
• Also includes Deliverables that apply to all tasks listed in section 6, Performance Requirements.

Benefits

• Highly competitive salary
• 401K
• Health care
• Paid time off
• No-limit student loan forgiveness (merit based)
• New/qualified employees sponsored for Security Clearance
• Casual dress code
• Free parking
• Corporate discounts
• Gym memberships