Vulnerability Management & Compliance Engineer

ShorePoint; Washington (District of Columbia); In loco; USD 120.000 - 170.000; Tempo pieno

Vantaggi offerti da questo lavoro

PTO 144 hours

11 holidays

Insurance coverage 85%

401k

Education/certifications reimbursement

Descrizione del lavoro

ShorePoint is a fast-growing cybersecurity services firm focused on high-threat private and public-sector customers. We are seeking a Compliance and Continuous Monitoring Engineer - Vulnerability Management with Top Secret Clearance to support assessment and authorization activities, perform security evaluations, and strengthen enterprise posture.

The role involves hands-on scanning, reporting, and compliance support, utilizing Nessus, Tenable, AppDetective, DbProtect, and Web Inspect, with a

Competenze

• Bachelor's degree or 10+ years IT experience in lieu of degree.
• One or more certifications: CISSP, GIAC, GCIA or GCIH.
• Ability to analyze complex requirements and translate them into clear, actionable tasks and processes.
• Experience performing vulnerability and compliance assessments on devices, databases and web applications.
• Strong knowledge of security controls, NIST, SANS and OWASP Top 10.

Mansioni

• Work closely with organizations to ensure full comprehension of security controls; conduct site visits as required.
• Assist with compliance assessments using tailored control matrices; provide expert assessment support.
• Conduct annual reviews of security controls to ensure continued compliance.
• Establish footholds on endpoints to provide day-to-day visibility into enterprise security posture.
• Develop and maintain processes and best practices for evaluating assessment and authorization data.
• Use industry-standard automation tools to review system configurations and security control compliance.
• Conduct NIST control assessments in support of system authorization and continuous monitoring.
• Develop and maintain Security Assessment Reports (SARs) and Risk Assessment Reports (RARs).
• Employ a scan-patch-scan methodology to ensure proper remediation of vulnerabilities.
• Conduct vulnerability scanning on a weekly to bi-weekly basis using industry-standard tools.
• Report scan data to system administrators to support timely remediation.
• Perform false positive and vulnerability analysis to validate findings and prioritize remediation.
• Configure applications to ingest, process and report vulnerability data from assessments and self-assessments.
• Conduct long-term trend analysis to identify changes in enterprise security posture.
• Provide dashboard views and executive-level reports to communicate risk, vulnerability and compliance posture.
• Configure authenticated and unauthenticated scans of web servers to identify vulnerabilities.
• Assess both in-house and COTS web applications to identify OWASP Top 10 risks.
• Lead technical troubleshooting sessions with administrators and leadership to analyze findings and drive remediation efforts.
• Maintain a general understanding of network architecture diagrams to support vulnerability analysis and remediation planning.

Conoscenze

Vulnerability management

Security assessments

Analytical thinking

Communication skills

Critical thinking

Formazione

Bachelor's degree in Cybersecurity, CS, IS, Math, Engineering or related field

10+ years IT experience in lieu of degree

Strumenti

Tenable Nessus

Tenable Security Center

AppDetective

DbProtect

Web Inspect

NMAP

Guardium

Hailstorm

Descrizione del lavoro

ShorePoint is a fast-growing cybersecurity services firm focused on high-threat private and public-sector customers. We are seeking a Compliance and Continuous Monitoring Engineer - Vulnerability Management with Top Secret Clearance to support assessment and authorization activities, perform security evaluations, and strengthen enterprise posture.

The role involves hands-on scanning, reporting, and compliance support, utilizing Nessus, Tenable, AppDetective, DbProtect, and Web Inspect, with a