Req ID: RQ195997Type of Requisition: RegularClearance Level Must Be Able to Obtain: Top Secret SCI + PolygraphPublic Trust/Other Required: NoneJob Family: Cyber SecuritySkills:Cybersecurity,Nessus Vulnerability Scanner,System Security,Vulnerability Assessments,Vulnerability ScanningCertifications:CompTIA - Security+ - CompTIA - CompTIAExperience:4 + years of related experienceUS Citizenship Required:YesJob Description:The Analyst shall operate and maintain the ACAS solution, to support network and application scanning and ensure configuration assessments are conducted and incidents are resolved in accordance with the incident response table and client SOPs.Familiar in the utilization of Tenable NESSUS Assured Compliance Asset Solution (ACAS) scanning agent and Vulnerability Remediation Asset Manager (VRAM) across seven shipboard enclaves.-Perform Nessus vulnerability scans, Nessus agent scans, and Passive vulnerability scans.-Installation, monitoring, testing, troubleshooting, and administration of the Nessus and Passive Vulnerability Scanner applications.-Create ACAS queries to optimize processes, procedures, and analysis.-Configures, optimizes, and tests vulnerability scans against new and existing Operating Systems and platforms.-Conduct vulnerability analysis, research, and script analysis to verify potential false positives.-Perform scan policy analysis & configuration to determine the impact of vulnerability scanning against target devices.-Interprets, analyzes, and reports all events and anomalies in accordance with computer network directives, including initiating, responding, and reporting discovered events.-Evaluates, tests, recommends, coordinates, monitors, and maintains cybersecurity policies, procedures, and systems, including access management for hardware, firmware, and software.-Ensures that cybersecurity plans, controls, processes, standards, policies, and procedures are aligned with cybersecurity standards.-Identifies security risks and exposures, determines the causes of security violations, and suggests procedures to halt future incidents and improve security.-Develops techniques and procedures for conducting cybersecurity risk assessments and compliance audits, the evaluation and testing of hardware, firmware, and software for possible impact on system security, and the investigation and resolution of security incidents such as intrusion, frauds, attacks or leaks.-Maintain system documentation.Education and Experience:-BA/BS in Cyber Security or equivalent or documented 8+ years of experience.-2+ yrs Knowledge and experience with ACAS Security Center (SC) and Nessus Vulnerability Scanners (NVS).-Possess understanding and experience with common cybersecurity toolsets and processes to include STIGS, CAS, IAVA Management and Implementation, and OPORD/FRAGO support.-ATO process.DOD RMF Configuration Management.NIST SP800-53 and NIST SP800-37.Qualifications:TS/SCI eligible with POLY.DoD 8570 IAT II certification.Security+ / LinuxUS Citizenship RequiredThe likely salary range for this position is $102,000 - $138,000. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.We are GDIT. A global technology and professional services company that delivers consulting, technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 30 countries worldwide, offering leading capabilities in digital modernization, AI/ML, Cloud, Cyber and application development. Together with our clients, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.We connect people with the most impactful client missions, creating an unparalleled work experience that allows them to see their impact every day. We create opportunities for our people to lead and learn simultaneously. From securing our nation’s most sensitive systems, to enabling digital transformation and cloud adoption, our people are the ones who make change real.Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans
