A Vulnerability Analyst or Penetration Tester probes for and exploits security vulnerabilities in web-based applications, networks and systems. Penetration Tests are designed to achieve a specific, attacker-simulated goal and should be requested by customers who are already at their desired security posture. A typical goal could be to access the contents of the prized customer database on the internal network, or to modify a record in an HR system. Vulnerability Assessments are designed to yield a prioritized list of vulnerabilities and are generally for clients who already understand they are not where they want to be in terms of security. The customer already knows they have issues and simply need help identifying and prioritizing them.
Job Requirements Hampton, VA Clearance Unspecified Polygraph not specified Senior Level Career (10+ yrs experience) $114,000 - $129,000 Job Description Job Description The Cyber Analyst, Senior, applies expertise and work experience executing cyber risk assessments to perform duties assigned by the Security Control Assessor (SCA) for the Department of the Air Force (DAF) Enterprise Authorizing Official (EAO) systems. The ideal candidate will provide a broad range of information assurance activities and possess a strong knowledge of systems, operating environments, system security, and networking. •This position requires onsite work in Hampton, VA. Job Duties Determine system vulnerabilities and residual risk based on analysis of technical artifacts, interviews, and evaluation of current system state Evaluate effectiveness of proposed mitigations Provide recommendations to leadership on technical and policy changes, processes and methodologies to assess and mitigate cybersecurity risk on information systems Work with other Cyber Analysts, SMEs and SCA-Rs to ensure that all cybersecurity analysis and cybersecurity risk assessments are completed within time and quality standards established by Division leadership and Operations Manager/Task Lead Train new team members in the proper methods to perform assessment reviews and support development of training materials for field personnel (system owner personnel) to support effective and efficient RMF processes Support program and projects with security and information assurance requirements elicitation based on customer and subject matter expert communication and independent research Support Operations Manager/Task Lead with program execution, deliver program deliverables, and support strategic process development Perform all other duties, as assigned Requirements Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or related field required. Equivalent work experience may be substituted for degree requirement. Master's degree is preferred. IAM Level II or III Certification in accordance with the DoD approved 8140 baseline certifications required Must have at least 10 years of experience in cyber risk assessment or experience with technologies utilized in AFNET or DoD systems Proficiency with eMASS preferred Must have familiarization with
NIST SP 800-53, AFI
17-130, and
DODI 8510.01
Strong planning, organization, and analytical skills, with attention to detail required Must be able to take initiative and be self-motivated Must be a quick learner, passionate about technology and able to learn new technology areas, as directed Must be able to elicit, identify, and research information assurance requirements and perform as a member of an assessment review team Must be able to work effectively as a team member, as well as lead others to meet team and overall company goals and objectives Must be able to work independently with minimal supervision Excellent verbal and written communication skills and exceptional interpersonal skills required Must be able to display professionalism in all situations Must be able to implement, monitor and maintain quality control standards Knowledge in emerging technologies, including cloud, AI and virtualization, networking, systems engineering, identity management, web technologies, system administration, and system security is preferred This position requires onsite work. Must remain flexible to be able to work in the office, as assigned. Active DoD security clearance required Benefits Referentia offers a comprehensive set of benefits which includes health insurance coverage (medical, dental, vision, drug), paid time off, group term life insurance, accidental death & dismemberment insurance, income protection coverage, 401K retirement plan with employer matching, tuition reimbursement, and more. We are proud to be an Equal Employment Opportunity Employer.
