Cyber Vulnerability Manager

Information Assurance Vulnerability Manager (IAVM) to support the Information Assurance Management (IAM) office through oversight of the organizational vulnerability identification, remediation and reporting process. The IAVM will provide guidance on Department of Defense (DoD), Army and organizational vulnerability management policies and perform vulnerability data analysis to identify potential issues and recommend corrective actions.

Key Responsibilities:

• Coordinate weekly vulnerability scanning and dissemination of results.
• Perform vulnerability data analysis to identify gaps in organizational vulnerability remediation.
• Review vulnerability false positives for valid technical basis and justification.
• Coordinate wireless scans of organizational facilities and identify rogue access points.
• Evaluate new technologies and provide a technical recommendation for the organization to meet mission critical research needs.
• Assist organizational IT support staff in investigating the technical causes of discrepancies with patch application and vulnerability remediation.
• Assist IA staff with Risk Management Framework (RMF) compliance requirements.
• Write and review Standard Operating Procedures (SOPs).
• Assist and provide guidance to the network vulnerability scan team.
• Report organizational patching status in accordance with DoD and Army requirements.
• Work with developers to ensure organizational system images are compliant with DoD and Army mandated configurations.

Required Skills:

• Vulnerability assessment experience required.
• Experience implementing the DoD Vulnerability Management Program.
• Proficient understanding of DoD and Army IA policies, guidance, and best practices.
• Experience using DoD vulnerability scanning applications (e.g. Retina, Nessus, Flying Squirrel).
• Functional understanding of network architecture and TCP/IP protocols.
• Skilled with Microsoft Office products for creating documents using Word, PowerPoint, and Excel.
• Skilled in Microsoft Windows, Apple MacOS, and UNIX operating system security architecture.
• Strong ability to develop effective written procedures and SOPs to guide daily operations.
• Customer friendly.
• Able to multi-task.
• Excellent written, verbal and problem-solving skills.