Cyber Vulnerability Assessment Analyst - Intermediate

Job Description

Job Description

POSITION SUMMARY

NewSat is seeking an Intermediate-level Vulnerability Assessment Analyst to support our U.S. Space Force (USSF) customer. This position performs vulnerability assessment and remediation-tracking activities across a platform spanning more than 42 deployed environments across approximately 900 servers at multiple classification levels.

Working with only periodic high-level guidance, the Intermediate VAA executes recurring and ad hoc assessments, validates findings, and supports remediation and continuous monitoring activities in non-routine and sometimes complicated situations. This role supports the task order’s Continuous Cyber Monitoring, Threat Assessment and Risk Mitigation, and Body of Evidence artifact management service areas.

KEY RESPONSIBILITIES

•      Execute scheduled and ad hoc vulnerability scans across the existing environment and during assessment of new connections using ACAS/Nessus and DoD-approved assessment tooling.

•      Apply DISA STIGs and SCAP benchmarks; validate compliance results and research findings to confirm or dismiss false positives.

•      Analyze scan output, correlate findings across environments, and document results in standardized assessment reports.

•      Track remediation actions to closure with system owners; support POA&M entry, updates, and supporting evidence.

•      Assemble Body of Evidence (BoE) artifacts supporting Certificate to Field (CtF), Authority to Connect (ATC) and continuous monitoring requirements.

•      Support assessment of cloud and container workloads, including AWS tenant spaces and EKS-hosted services.

•      Escalate complex, high-risk, or disputed findings to the Advanced VAA or Security Architect for adjudication.

•      Maintain assessment documentation, scan configurations, and reporting cadence in accordance with program procedures.

REQUIRED QUALIFICATIONS

•      Active TS clearance with SCI eligibility; ability to meet program-directed access requirements.

•      Minimum 4 years of cybersecurity experience with direct vulnerability assessment or vulnerability management responsibility.

•      Security+ CE or equivalent DoD 8140 / 8570 baseline certification current at time of hire.

•      Hands-on experience with ACAS/Nessus or comparable scanning platforms and with STIG/SCAP compliance checking.

•      Familiarity with RMF, NIST SP 800-53 control families, and POA&M processes.

•      Ability to work non-routine assessment tasks with only periodic high-level supervision.

PREFERRED QUALIFICATIONS

•      Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or a related field.

•      Experience supporting DoD, IC, or space ground system programs.

•      Certifications such as CySA+, CEH, GCIH, or GSEC.

•      Exposure to containerized or cloud environments (Kubernetes/EKS, AWS).

•      Scripting familiarity (Python, PowerShell, Bash) for reporting and data reduction.

NewSat provides cost-competitive, best-of-breed, global C5ISR solutions to ensure mission success for our customers. Our small business provides solutions to many industry partners, both as a prime contractor and value-added subcontractor.

Company Description

NewSat provides cost-competitive, best-of-breed, global C5ISR solutions to ensure mission success for our customers. Our small business provides solutions to many industry partners, both as a prime contractor and value-added subcontractor.