Cybersecurity Vulnerability Assessment Analyst (VAA) - DoD 8140 Basic

Job Description

Job Description

POSITION SUMMARY

NewSat is seeking a Vulnerability Assessment Analyst (VAA) to support our U.S. Space Force (USSF) customer. This position supports vulnerability assessment, security compliance, and continuous monitoring activities across a distributed system spanning more than 42 deployed environments and approximately 900 servers at multiple classification levels.

Working under established procedures and the guidance of senior cybersecurity personnel, the Vulnerability Assessment Analyst conducts vulnerability scans, reviews security configurations, identifies and documents vulnerabilities, and supports remediation tracking across designated system environments. The analyst assists with DISA Security Technical Implementation Guide (STIG) compliance, Risk Management Framework (RMF) activities, Authority to Connect (ATC) support, Certificate to Field (CtF) documentation, and Body of Evidence (BoE) artifact management.

The successful candidate will apply established assessment methodologies and cybersecurity standards to identify security deficiencies, maintain accurate assessment records, and help ensure system configurations meet applicable DoD security requirements.

KEY RESPONSIBILITIES

·       Conduct routine vulnerability assessments and security compliance checks across servers, operating systems, and designated system components.

·       Operate approved vulnerability scanning tools to identify, document, and track security weaknesses and configuration deficiencies.

·       Review vulnerability scan results, validate findings as directed, and assist with prioritizing remediation activities based on severity and established procedures.

·       Perform DISA STIG compliance assessments and review system configurations against approved security baselines.

·       Document vulnerability findings, affected assets, severity ratings, remediation recommendations, and assessment results.

·       Track identified vulnerabilities and STIG findings through remediation and assist with verifying corrective actions.

·       Support the collection and maintenance of technical evidence for RMF activities, ATC packages, CtF support, and accreditation documentation.

·       Assist in developing and maintaining Body of Evidence (BoE) artifacts, including scan results, compliance reports, assessment records, and remediation evidence.

·       Review system patch status, security configuration settings, and applicable compliance reports to identify potential security deficiencies.

·       Coordinate with system administrators, system owners, cybersecurity engineers, and other assessment personnel to resolve findings and maintain accurate vulnerability status.

·       Support continuous monitoring activities and periodic reassessment of system security compliance.

·       Follow established procedures for handling classified information and operating within authorized government environments.

·       Escalate complex technical findings, unresolved vulnerabilities, and potential security risks to senior cybersecurity personnel.

REQUIRED QUALIFICATIONS

·       1–3 years of relevant cybersecurity experience, preferably in vulnerability assessment, vulnerability management, security compliance, information assurance, or system administration with security responsibilities.

·       One or more of the following certifications: Security+, GICSP, GSEC (no colledge degree required)

·       Active Top Secret clearance with SCI eligibility and the ability to meet program-directed access requirements.

·       Basic working knowledge of vulnerability assessment methodologies, security scanning, and remediation tracking.

·       Familiarity with operating system security, patch management, and secure configuration practices.

·       Ability to interpret technical assessment results, document findings accurately, and follow established remediation and reporting procedures.

·       Familiarity with DISA STIGs, NIST cybersecurity guidance, or DoD security compliance processes.

·       Ability to work independently on routine assigned tasks while seeking guidance when findings or situations exceed established procedures.

·       Strong written communication, organization, and attention to detail.

PREFERRED QUALIFICATIONS

·       Experience supporting DoD, Intelligence Community (IC), or other federal government information systems.

·       Familiarity with vulnerability assessment tools such as ACAS, Tenable Nessus, Qualys, or equivalent platforms.

·       Experience conducting STIG compliance checks or reviewing SCAP compliance results.

·       Familiarity with NIST SP 800-53 security controls and Risk Management Framework (RMF) processes.

·       Experience supporting system accreditation, continuous monitoring, ATC, ATO, or CtF documentation.

·       Familiarity with Linux and Windows server environments.

·       Previous experience supporting USSF, Space RCO, satellite ground systems, or classified operational environments.

NewSat provides cost-competitive, best-of-breed, global C5ISR solutions to ensure mission success for our customers. Our small business provides solutions to many industry partners, both as a prime contractor and value-added subcontractor.

Company Description

NewSat provides cost-competitive, best-of-breed, global C5ISR solutions to ensure mission success for our customers. Our small business provides solutions to many industry partners, both as a prime contractor and value-added subcontractor.