Vulnerability Management / Cyber Operations Analyst

Dunhill Professional Search & Government Solutions; United States; Remote; USD 135,000 - 170,000; Full time

Job summary

Dunhill Government Solutions is seeking a Vulnerability Management / Cyber Operations Analyst to support a federal agency’s cybersecurity operations. You will run and validate vulnerability scans, prioritize remediation with IT teams, and monitor for suspicious activity from a remote location in the United States.

The role requires 5–10 years of systems security experience, plus certifications such as Security+, CEH or CISSP.

Qualifications

• Bachelor's degree or equivalent experience in CS or related field.
• 5–10 years of systems security experience.
• Security certifications such as Security+, CEH, CISSP or similar.
• Knowledge of network protocols, Windows and Linux, and security tools.
• Familiarity with Tenable Security Center / Nessus scanners.
• Knowledge of federal cybersecurity policy and NIST 800-series guidance.
• Advanced knowledge of encryption, vulnerability assessment, penetration testing, cyber forensics, intrusion detection and incident response.
• Scripting skills to integrate with security tools and dashboards, plus governance and documentation skills.
• Excellent attention to detail and ability to balance multiple tasks.

Responsibilities

• Run vulnerability scans; analyze and validate security vulnerabilities and prioritize risks per federal BOD guidance
• Coordinate remediation with infrastructure and application teams, verify remediation and closure, document false positives, manage risk acceptances and vulnerability reporting
• Monitor network traffic, system and audit logs and security alerts for suspicious activity
• Investigate suspected and confirmed security breaches, identify root cause, stop active attacks and trace impact through logs
• Support threat analysis and digital forensic activities; troubleshoot when breaches or system failures occur
• Create cyber-intelligence tools and methods; research and analyze to mitigate cyber risks
• Design and develop acceptance criteria for cybersecurity architecture
• Support current cyber initiatives including audit logging, zero trust, encryption
• Participate in periodic system audits and monitor corrective actions until closure
• Document security events, write incident reports and recommend upgrades to management
• Create security standards and best practices for employees; explain risks to non-technical staff and management

Skills

Vulnerability management

Incident response

Threat analysis

Scripting

Governance & docs

Attention to detail

Education

Bachelor's degree in Computer Science or related field

Tools

SIEM

Nessus

Tenable Security Center

Job description

Dunhill Government Solutions is hiring a Vulnerability Management / Cyber Operations Analyst to support a federal agency's cybersecurity operations. You will run and validate vulnerability scans, prioritize and drive remediation with infrastructure and application teams, monitor for and investigate suspicious activity, and build the tools and methods that reduce data and cyber security risk. This is a full-time, fully remote (telework) role.

Responsibilities:

• Run vulnerability scans; analyze and validate security vulnerabilities and prioritize risks in line with federal Binding Operational Directive (BOD) guidance
• Coordinate remediation with infrastructure and application teams, verify remediation and closure, document false positives, manage risk acceptances and coordinate vulnerability reporting
• Monitor network traffic, system and audit logs and security alerts for suspicious activity
• Investigate suspected and confirmed security breaches, find the root cause, stop active attacks and trace the full impact (“blast radius”) of a threat through complex log data
• Support threat analysis and digital forensic activities; troubleshoot quickly when a breach or system failure occurs
• Create cyber-intelligence tools and methods and perform research and analysis to mitigate and eliminate data and cyber security risks
• Design and develop acceptance criteria for cybersecurity architecture
• Support current cyber initiatives and requirements, including audit logging, zero trust architecture and encryption
• Take part in periodic reviews of each system’s audits and monitor corrective actions until every action is closed
• Document security events, write incident reports and recommend upgrades to management
• Create security standards and best practices for employees, and explain technical risks and security guidelines clearly to non-technical staff and management

Required qualifications:

• Bachelor’s degree in Computer Science or a related field, or equivalent experience
• 5-10 years of experience in systems security
• Security certification such as Security+, CEH, CISSP or other application vendor certifications
• Understanding of network protocols, operating systems (Windows, Linux) and security tools such as SIEM (Security Information and Event Management)
• Familiarity with Tenable Security Center / Nessus scanners
• Knowledge of federal cybersecurity policy and guidance, including OMB, Executive Orders and the NIST 800 series
• Advanced knowledge of encryption, vulnerability assessment, penetration testing, cyber forensics, intrusion detection, and incident response and remediation
• Scripting skills to integrate with security tools and dashboards, plus governance, policy process and documentation skills
• Excellent attention to detail and the ability to balance multiple tasks simultaneously

Location:

Remote (full-time telework), United States.

US Citizenship and the ability to pass a federal background investigation in order to be granted access to sensitive information.

Compensation:

$135,000 - $170,000 per year