Application Vulnerability Assessor I (IT Support Specialist I)

Nevada National Security Site - North Las Vegas, NV

Full-time - Entry Level

North Las Vegas, NV

About the position

The Nevada National Security Site is seeking an IT Support Specialist I - Application Vulnerability Analyst to join the MSTS Cyber Security team. This role is critical in ensuring the security and compliance of applications within an enterprise environment. The ideal candidate will possess the necessary knowledge, skills, and abilities to conduct thorough application-level scanning and vulnerability remediation operations. The position requires a proactive approach to identifying vulnerabilities and implementing effective solutions to mitigate risks associated with application security. As an Application Vulnerability Analyst, you will be responsible for conducting vulnerability and compliance scans using various tools, including Tenable products such as Security Center and Nessus. You will ensure the accuracy of scan results and coordinate with senior vulnerability team members to address any authentication and scan failure issues. Your role will also involve applying vendor-provided application updates and patches to remedy identified vulnerabilities, as well as assisting in the review and updating of vulnerability remediation documentation. Collaboration is key in this position, as you will interact with other IT members and management to execute directives and vulnerability remediation initiatives. You will monitor dashboards that present actionable vulnerability data and work closely with users to ensure that remediation efforts are completed effectively. Additionally, you will assist in researching, compiling, and analyzing technical data, as well as supporting data calls, FISMA reporting, compliance scanning, and reporting for auditors. A strong emphasis will be placed on providing excellent customer service and maintaining cooperative relationships with Cyber Security staff and other divisions.

Responsibilities

• Conduct vulnerability and compliance scans using various tools including Tenable products like Security Center, Nessus, and other application assessment tools.
• Ensure scan results are accurate and coordinates authentication and scan failure issues with senior vulnerability team members.
• Apply vendor provided application updates and patches to remedy identified vulnerabilities as directed.
• Assist with the review and updating of vulnerability remediation documentation including methods and procedures for conducting scanning and patching processes.
• Interact and coordinate with other IT members and management to execute directives and other vulnerability remediation initiatives.
• Monitor dashboards that present actionable vulnerability data.
• Collaborate with users to ensure that vulnerability remediation is complete and verify effectiveness of results.
• Assist in researching, compiling, and analyzing technical data.
• Assist with data calls, FISMA reporting, compliance scanning and reporting, continuous monitoring and compiling reports for auditors.
• Contribute to an overall productive and respectful work environment by providing excellent customer service and working in a positive, collegial manner at all times.

Requirements

• Knowledge of application-level scanning and vulnerability remediation operations.
• Experience with vulnerability and compliance scanning tools, particularly Tenable products like Security Center and Nessus.
• Ability to coordinate and troubleshoot authentication and scan failure issues.
• Familiarity with applying application updates and patches to address vulnerabilities.
• Strong documentation skills for updating vulnerability remediation processes.
• Ability to collaborate effectively with IT team members and management.
• Experience in monitoring and analyzing vulnerability data from dashboards.
• Strong customer service skills and ability to maintain cooperative working relationships.

Nice-to-haves

• Experience with FISMA reporting and compliance scanning.
• Knowledge of continuous monitoring practices.
• Familiarity with cybersecurity frameworks and standards.