Vulnerability Assessment Analyst

Amyx, Inc.; Burke (VA); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Health insurance

401(k)

PTO

HSA

Life Insurance

Job summary

Amyx, Inc. seeks a Vulnerability Assessment Analyst to join our cybersecurity team supporting an intel client in Springfield, VA. The position is on-site only, requiring TS/SCI eligibility with CI polygraph.

You will perform vulnerability and configuration assessments, coordinate remediation, and apply RMF processes per NIST SP 800-37 Rev. 2. Candidates should have a BS in CS/Cybersecurity or related field and hands-on with Nessus/ACAS/Tenable, plus strong communication to coordinate with system

Qualifications

• Bachelor’s degree or equivalent experience in a related field.
• Experience with vulnerability management and RMF.
• Familiarity with Nessus/ACAS/Tenable and vulnerability data analysis.

Responsibilities

• Perform vulnerability assessments of systems and networks and identify deviations from policy.
• Coordinate remediation with system owners and track findings to closure.
• Develop measures of effectiveness for defense-in-depth architectures.

Skills

Vulnerability management

RMF

NIST SP 800-37

Communication

Analytical thinking

Team collaboration

Incident response

Education

Bachelor’s degree in Computer Science / Cybersecurity / Information Technology

Tools

Nessus

ACAS

Tenable

Job description

Amyx is seeking to hire a Vulnerability Assessment Analyst to join our intel client's program in Springfield, VA. As a member of the Cybersecurity Vulnerability Management team, the contractor executes the Vulnerability Management aspect of the Risk Management Framework (RMF) in accordance with NIST SP 800-37 Rev. 2, or subsequent versions, and the client's RMF Implementation Guide (RIG) for client authorized systems. This position supports the client in Springfield, Virginia, and is on-site only; remote or hybrid work is not authorized.

• Perform assessments of systems and networks within the network environment or enclave and identify deviations from approved configurations, enclave policy, or local policy.
• Review, promulgate, and track Cyber Task Orders; coordinate with relevant information system owners to resolve findings.
• Develop measures of effectiveness for defense-in-depth architectures against known vulnerabilities.
• Identify systemic security issues through analysis of vulnerability and configuration-compliance data, including Security Technical Implementation Guide (STIG) data.
• Prioritize vulnerability-reduction activities based on threat data, vulnerability severity, mission criticality, and applicable policy requirements.
• Conduct vulnerability scans, validate findings, coordinate remediation tracking, and verify closure.
• Analyze web application vulnerability assessments and recommend remediation actions for known vulnerabilities and misconfigurations.
• Apply cybersecurity and privacy principles to organizational requirements, including confidentiality, integrity, availability, authentication, and non-repudiation.
• Must have the ability to communicate accurate information
• TS/SCI eligibility, subject to a Counterintelligence (CI) Polygraph.
• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• In lieu of a degree, candidates may qualify through relevant experience combined with one of the following certifications Security+, PenTest+, GSEC, GICSP, GCSA, GCIH, GCED, FITSP-A, CPTE, Cloud+, RCCE Level 1, or CEH (Practical).
• Experience in vulnerability management using tools such as Nessus, ACAS, or Tenable.
• Knowledge of computer networking concepts and protocols, network-security methodologies, and risk-management processes.
• Knowledge of cyber threats, vulnerabilities, and the operational impacts of cybersecurity lapses.
• Knowledge of cryptography and cryptographic key management.
• Knowledge of network attacks and their relationship to threats and vulnerabilities.
• Knowledge of applicable cybersecurity policies, compliance requirements, and assessment guidance for vulnerability management, cyber defense auditing, and RMF implementation.
• Ability to collaborate with IT asset owners to develop accurate, actionable vulnerability-remediation plans using a positive customer-service approach.
• Ability to analyze vulnerability data, identify discrepancies and trends, and support continuous improvement of vulnerability-management processes.
• Demonstrated attention to detail in validating scan results, remediation evidence, system documentation, and corrective actions.

Benefits include

• Medical, Dental, and Vision Plans (PPO & HSA options available)
• Flexible Spending Accounts (Health Care & Dependent Care FSA)
• Health Savings Account (HSA)
• 401(k) with matching contributions
• Roth
• Qualified Transportation Expense with matching contributions
• Short Term Disability
• Long Term Disability
• Life and Accidental Death & Dismemberment
• Basic & Voluntary Life Insurance
• Wellness Program
• PTO
• 11 Holidays
• Professional Development Reimbursement

Amyx is proud to be an Equal Opportunity Employer. All qualified candidates will be considered without regard to race, color, religion, national origin, age, disability, sexual orientation, gender identity, status as a protected veteran, or any other characteristic protected by law. Amyx is a VEVRAA federal contractor and we request priority referral of veterans.

Physical Demands

Employee needs to be able to sit at a workstation for extended periods; use hand(s) to handle or feel objects, tools, or controls; reach with hands and arms; talk and hear. Most positions require ability to work on desktop or laptop computer for extended periods of time reading, reviewing/analyzing information, and providing recommendations, summaries and/or reports in written format. Must be able to effectively communicate with others verbally and in writing. Employee may be required to occasionally lift and/or move moderate amounts of weight, typically less than 20 pounds. Regular and predictable attendance is essential.