Vulnerability Assessment Analyst

San Antonio, TX

Full-time

Onsite

$62K/yr - $141K/yr

Entry, Mid Level

Booz Allen Hamilton is a cybersecurity firm that focuses on mitigating vulnerabilities for mission partners. As a Vulnerability Assessment Analyst, you will evaluate risks, monitor security environments, and provide recommendations to enhance cybersecurity measures.

Apply Now

Responsibilities

Help customers solve problems using the latest software
Monitor security environments and identify security gaps through the eyes of an adversary
Impact key mission components by monitoring the network environment for new and evolving threats
Analyzing integrated Validated Online Lifecycle Threat (VOLT) reports with all-source intelligence
Supporting damage assessment activities to assess adversary capabilities

Qualification

Required

2+ years of experience in cybersecurity
Experience performing vulnerability scanning, assessment, and remediation tracking within DoD or Intelligence Community environments
Experience with vulnerability management tools such as ACAS, Tenable.sc, Nessus, or Qualys
Experience generating and maintaining Plan of Action and Milestones (POA&M) documentation
Experience reviewing and tracking security exceptions documentation
Knowledge of RMF, NIST SP 800-53, STIGs, IAVMs, and DoD cybersecurity compliance processes
Ability to work a rotating shift schedule supporting a 24/7 environment
TS/SCI clearance
Bachelor’s degree
DoD 8140 baseline Level II Certification such as Security+, CySA+, or CISSP Certification

Preferred

Experience supporting Air Force or Joint Cyber Operations units
Experience with enterprise patch management tools such as SCCM, MECM, Tanium, or BigFix, and automated compliance reporting
Experience integrating vulnerability data into dashboards using Power BI, Elastic, or Splunk
Experience with PowerShell scripting
Experience supporting Agile cyber engineering teams
Knowledge of risk scoring methodologies such as CVSS, and asset prioritization frameworks
Master’s degree in Cybersecurity, Computer Engineering, or Information Assurance
CASP+, CEH, or Certified Vulnerability Assessor (CVA) Certification
SAFe Agile or ITIL Certification