Vulnerability Manager II

Job Title

Essential Job Functions

• Knowledge of cyber threats and vulnerabilities.
• Determine overall Common Vulnerabilities and Exposures (CVE) priority when threat activity is identified; report incidents that may cause immediate and/or ongoing impact to the environment.
• Monitor and provide periodic system owners vulnerability mitigation completion updates. Knowledge of system and application security threats, vulnerabilities, and cyber attackers.
• Monitor external data sources to determine which security issues may have an impact on the enterprise.
• Identify, develop, and determine mitigation or remediation actions for system and network vulnerabilities.
• Communicate written and verbal information in a timely, clear, and concise manner.
• Apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
• Knowledge of different classes of attacks (e.g., passive, active, insider, close-in, distribution attacks).
• Knowledge of system administration, network, operating system hardening techniques, and the risk management process.
• Knowledge of specific operational impacts of cybersecurity lapses and organization's threat environment.
• Recommend impact/risk assessments to identify systemic security issues based on the analysis of vulnerability and configuration data.
• Document and escalate incidents (including event's history, status, and potential impact for further action); recommend mitigations that will have immediate impact to the environment. Perform after-action reviews of team products to ensure completion of analysis.
• Lead and mentor team members as a technical expert.

Minimum Required Qualifications

• Due to the nature of this position and the information that employees will be required to access; U.S. Citizenship is required.
• Active Top Secret Security Clearance with Full Scope polygraph is required.
• Four (4) years of demonstrated experience as a VM in programs and contracts of similar scope, type, and complexity is required.
• Two (2) years of experience of technical reporting.
• Two (2) years of experience in network and threat analysis.
• A technical bachelor's degree from an accredited college or university may be substituted for two (2) years of VM experience on projects of similar scope, type, and complexity.
• Multiple Shifts available.