cyber security expert

Cyber Security Analyst

Strong understanding of cyber security processes and tools, i.e. penetration testing, scan analysis, vulnerability scans, physical security, vulnerability management

• Knowledge and understanding of DOD security regulations, DISA Security Technical Implementation Guides (STIGS)
• Proven proficiency performing CCRI/ CVA/ penetration testing on networks, databases, computer applications and IT frameworks
• Training in ICS-CERT highly desirable
• Strong skills implementing and configuring networks and network components
• Understanding of DOD Vulnerability Management System
• DISA CCRI Reviewer experience highly desirable
• Understanding of SCAP
• Completed and passed test for DISA SRR training in at least one of the following areas:
• ACAS scan analysis
• Operating Systems (Windows, Unix)
• Boundary defense (network policy, router, firewall)
• Internal defense (L2 switch, L3 switch)
• DNS (policy, BIND/Windows)
• HBSS (remote console, AV, ABM, PA, HIPS, ePO)
• Traditional security
• Wireless communications (BES, handhelds)
• Knowledge of and proficiency with:
• USCYBERCOM CTO Compliance Program
• Wireless vulnerability assessment/penetration testing
• Web Services (IIS, Apache, Proxy)
• Database (SQL Server, Oracle)
• Email Services (Exchange)
• Vulnerability Scans (SCCM)
• Knowledge of Phishing exercises
• Physical Security
• Knowledge of STIG Viewer Tool
• Knowledge of VOIP, VTC