Senior Vulnerability Engineer

AnaVation, LLC; Reston (VA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Disability insurance

Vision insurance

401(k) with match

Paid leave and holidays

Tuition reimbursement

Life Insurance

Job summary

AnaVation is seeking a Senior Vulnerability Engineer to support our vulnerability management program in Reston, VA. You will maintain patch repositories, issue alerts, track compliance, and lead governance for vulnerability management.

The role requires top-secret clearance, a CS degree with 8+ years of experience, CySA+ or equivalent, and hands-on expertise in ACAS, Tenable, AWS, and DevSecOps pipeline security.

Qualifications

• Active TS/SCI clearance with CI Polygraph required.
• Bachelor's degree in Computer Science or related field with 8+ years of relevant experience; master's can substitute for 2 years.
• CySA+ or equivalent IAT Level II certification required.
• 100% on-site in Reston, VA.
• Experience with vulnerability management, remediation techniques, and exploit development knowledge.
• Experience with ACAS scanning environments and cloud tools.
• DevSecOps pipeline scanning and alerting thresholds knowledge.

Responsibilities

• Maintain Vulnerability Management program requirements including patch repository and alerts.
• Coordinate periodic auditing and testing and governance for vulnerability management.
• Provide SME support for vulnerability assessment, risk analysis, and remediation strategies.
• Contribute to cross-functional teams and communicate security posture to leadership.

Skills

Leadership

Risk analysis

Cross-functional collaboration

Threat detection

Communication to leaders

Education

Bachelor's degree in Computer Science

CySA+ certification

Tools

ACAS scanning

Tenable

AWS

Job description

Be Challenged and Make a Difference

In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture.

Description of Task to be Performed

AnaVation is seeking a Senior Vulnerability Engineer to join our team and support our mission critical customer in Reston, VA. As our Senior Vulnerability Engineer, you will provide Subject Matter Expertise support to maintain Vulnerability Management Program requirements including, but not limited to, maintaining the patch repository, issuing alerts and bulletins, and tracking compliance. Additional responsibilities would include coordinating periodic auditing and testing and responsibility for overall governance supporting Vulnerability Management.

Required Qualifications

• Clearance: Top Secret SCI, Counterintelligence (CI) Polygraph
• Education: Bachelor's degree in Computer Science or relevant field and 8+ years of experience related to specific functional area. (May substitute Master's degree in lieu of 2 years of experience).
• Certifications: CySA+ or equivalent IAT Level II certification
• Location: 100% on-site position in Reston, VA.
• Experience:
  • Working collaboratively across cross-functional teams of all experience levels.
  • Detailed knowledge of system security vulnerabilities and remediation techniques, including testing and the development of exploits.
  • Detailed technical knowledge in security engineering, system and network security, authentication, and security protocols.
  • Skilled in risk management, business risk analysis, and making complex business/risk trade-off recommendations and decisions.
  • Experience in penetration testing and vulnerability analysis in modern technologies such as cloud, mobile, wireless, and cross domain solutions.
  • In depth knowledge and experience working with Assured Compliance Assessment Solution (ACAS) scanning environments.
  • Thorough understanding of DevSecOps Pipeline scanning in supporting development and alerting thresholds.
  • Solid understanding of Penetration Testing environments and Cloud tools.
  • Ability to provide recommendations for enhancing Detection and Alerting thresholds and Insider Threat capabilities.

Preferred Qualifications

• Security certifications: Security+, CCNA Security, CySA+, SSCP, CCSP, or equivalent certification
• AWS, Cloud certifications
• 4+ years experience with Tenable
• Strong experience and ability to present technical concepts and updates to senior leaders

Benefits

• Generous cost sharing for medical insurance for the employee and dependents
• 100% company paid dental insurance for employees and dependents
• 100% company paid long-term and short-term disability insurance
• 100% company paid vision insurance for employees and dependents
• 401k plan with generous match and 100% immediate vesting
• Competitive Pay
• Generous paid leave and holiday package
• Tuition and training reimbursement
• Life and AD&D Insurance

About AnaVation

AnaVation is the leader in solving the most complex technical challenges for collection and processing in the U.S. Federal Intelligence Community. We are a US owned company headquartered in Chantilly, Virginia. We deliver groundbreaking research with advanced software and systems engineering that provides an information advantage to contribute to the mission and operational success of our customers. We offer complex challenges, a top-notch work environment, and a world-class, collaborative team.

If you want to grow your career and make a difference while doing it, AnaVation is the perfect fit for you!

AnaVation is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.