Sr. System Administrator - Cyber Vulnerability (Onsite)

Sr. System Administrator – Cyber Vulnerability (Onsite)
Our client, a leading Pacific Northwest utility provider committed to public service and environmental preservation, is looking for a Sr. System Administrator – Cyber Vulnerability for their Vancouver, Washington location. This position
will work with the Operational Monitoring, Analysis, and Process, Operational Services, Information Technology organization. This role will perform systems analysis, interfacing with users to support functional requirements development, analysis of tools and techniques to support development, troubleshooting, analysis, performance monitoring, and improvement of systems used by the Operations functions. This assignment will provide Data Call responses and Cyber Vulnerability Assessments. The CVA team consists of an assessor and a business systems analyst. This assignment will perform scanning in conjunction with the CVA assessor.
This onsite position is a one-year renewable contract that includes employee benefits! If this opportunity is well-aligned with your experience and goals, we would love to hear from you!

• With Manager review and approval, perform Control Center Cyber Vulnerability Scanning.
• Define, identify, and classify the security holes (vulnerabilities) in a computer, network, or communications infrastructure.
• Interact with business units to discover, triage and resolve security vulnerabilities with manual and automated tools to enforce security criteria as part of a Secure Development Life Cycle on a continuous basis.
• Assist in Conducting vulnerability assessments (application and/or infrastructure) and articulate security issues to technical and non-technical audience. 
• Conduct vulnerability assessments using tools such as NMAP, Nessus, or other related tools. 
• Operate and analyze results of open-source security tools and vulnerability scanners including Wireshark, ngrep, nmap, and Snort.
• Assist with vulnerability assessments including evaluation of specific configurations of network devices, operating systems, and network enabled software applications on both Windows and Linux platforms.
• Configure vulnerability assessment tools, as well as perform scans, research and analyze vulnerabilities, identify relevant threats, corrective action recommendations, summarize and report out results.
• Conduct vulnerability assessments for networks, applications and operating systems.
• Use automated tools (e.g. Nessus) to pinpoint vulnerabilities and reduce time-consuming tasks.
• Use manual testing techniques and methods to gain a better understanding of the environment to reduce false negatives
• Develop, test and modify custom scripts and applications for vulnerability testing.
• Write and present comprehensive Vulnerability Assessments on new systems.
• Develop and maintain a vulnerability assessment database.
• Perform trend and analysis of vulnerability scan data.
• Automate procedures using scripts, Sequel (SQL)/database administration, or other available technology.
• Maintain functionality of vulnerability management tools including configuration and maintenance of applications (e.g. Nessus, Tenable Security Center and other vulnerability assessment tools).
• Perform compliance scanning to analyze configurations and facilitate implementation of configurations and hardening settings for networks, operating systems, applications, databases, and other information system components.
• Analyze Vulnerability scan results and engage with customers in order to resolve identified vulnerabilities.
• Assist in development and implementation of information security vulnerability management policies, procedures, and standards based on National Institute of Standards and Technology (NIST) 800-53 standards, best practices, and compliance requirements.

Requirements/Qualifications for Sr. System Administrator – Cyber Vulnerability:

• A degree in Computer Science, Information Technology, or a directly related technical discipline is preferred.
  • 8 years of experience is required with an applicable associate or bachelor’s degree .
  • 10 years of experience is required without an applicable degree or with no degree .
• Experience includes a minimum combination of work-related experience, on-the-job training, and/or vocational training. Experience should be consistent with the specific requirements of Computer/Information Technology or related field and progressively more technical in nature.

• 2 years’ experience with the following:
  • Classes of vulnerabilities, appropriate remediation, and industry standard classification schemes (CVE, CVSS, CPE)
  • Linux and Windows operating systems, including common programming or scripting languages
  • Devising methods to automate testing activities and streamline testing processes
• Knowledge of patching programs of major hardware/software manufacturers. Knowledge of secure configuration and hardening of systems
• Knowledge of methods for on-going evaluation of the effectiveness and applicability of information security controls (e.g., vulnerability testing, and assessment tools)
• Knowledge of security vulnerabilities, application analysis, and protocol analysis
• Knowledge of network topology, communication protocols, firewalls, proxies and IDS systems to effectively configure scanning software

**We are unable to accommodate corp. to corp. candidates**

Job ID: 14434