Information Security Analyst

Information Security AnalystWe are seeking an Information Security Analyst to join our team. This role will focus on performing various vulnerability management duties, including ACAS/Nessus vulnerability and scanning support, tracking and dissemination of vulnerability assessments, and the identification and reporting of network and system vulnerabilities, security events, and adverse cyber related activity identified through indicators. As an Information Security Analyst, will play a key role in managing all aspects of infrastructure systems used to manage CND-SP networks & resources, and will assess threats to the environment, to include patch repository maintenance, supporting and performing inspections to ensure compliance to DoD 8530 Standards, and participating in risk assessment during the C&A (certification and accreditation) process, as well as, supporting security certification tests and evaluation of assets.REQUIRED QUALIFICATIONS:Education & Years of Experience: Bachelor's degree and 8 years of experience related to specific functional area.Certifications: Currently hold, or be able to attain a CompTIA CYSA+ or equivalent certificationExperience and knowledge on:Experience with vulnerability scanning tools to include and understanding of Vulnerability Management System and Continuous Monitoring and Risk Scoring.Provide technical support to customers involving a wide range of software, hardware, and DoD specific applications with respect to the ACAS solutionSupporting vulnerability management program requirements including maintaining patch repository, issuing alerts and bulletins, and tracking complianceAbility to analyze the customer's needs and identify security requirements / solutions.Reviewing reporting, automation, and visualization systems to provide situational awareness and making recommendations to improve vulnerability management capabilitiesCoordinating access to systems and approvals for scanning activitiesConducting ad hoc testing to assist with development activities or vulnerability remediationReviewing and testing system security controls (managerial, operational, and technical) to determine adequacy against federal requirements (e.g., NIST SP 800-53) and mission contextProvide advanced troubleshooting and resolution of security products such as HBSS, Nessus Agent (ACAS)Creating, maintaining, and updating knowledge management and technical documentation of operational processes and findingsDemonstrated initiative (i.e. initiate appropriate action without being directed) and ability to work independently.Providing input on adequacy of security designs and architecturesDESIRED QUALIFICATIONS:Security certifications: CCNA Security, SSCP, or equivalent certificationCloud certificationsCLEARANCE:Top Secret minimum