Network Vulnerability Assessor II (IT Support Specialist II)

$46,051 - $69,077/Yr

Unclassified - North Las Vegas, NV

Full-time - Entry Level

North Las Vegas, NV

1,001-5,000 employees

About the position

MSTS is seeking an IT Support II - Vulnerability Analyst who possesses the knowledge, skills, and abilities required to conduct network scanning and vulnerability remediation operations within an enterprise environment. The primary work location will be at the Losee Road facility in North Las Vegas, Nevada. This position plays a critical role in ensuring the security of the organization's IT infrastructure by executing vulnerability and compliance scans using various tools, including Tenable products like Security Center and Nessus. The analyst will ensure that scan results are accurate and will coordinate with senior vulnerability team members to address authentication and scan failure issues. Additionally, the role involves tracking software updates from vendors such as Extreme OS, Cisco IOS, and Brocade Fabric OS, applying patches to remedy identified vulnerabilities within prescribed timeframes. The IT Support II - Vulnerability Analyst will also be responsible for reviewing and maintaining vulnerability remediation documentation, which includes methods and procedures for conducting scanning and patching processes. This position requires interaction and coordination with other IT members and management to execute directives and other vulnerability remediation initiatives. The analyst will collaborate with users to ensure that vulnerability remediation is complete and verify the effectiveness of results. Furthermore, the role includes assisting in researching, compiling, and analyzing technical data, as well as contributing to compliance scanning and reporting, continuous monitoring, and compiling reports for auditors. The analyst is expected to maintain a productive and respectful work environment by providing excellent customer service and working in a positive, collegial manner at all times.

Responsibilities

• Execute vulnerability and compliance scans using various tools including Tenable products like Security Center, Nessus, and other application assessment tools.
• Ensure scan results are accurate and coordinate authentication and scan failure issues with senior vulnerability team members.
• Track Extreme OS, Cisco IOS, and Brocade Fabric OS software updates provided by the vendors and apply patches to remedy identified vulnerabilities within prescribed timeframes.
• Review and maintain vulnerability remediation documentation including methods and procedures for conducting scanning and patching processes.
• Interact and coordinate with other IT members and management to execute directives and other vulnerability remediation initiatives.
• Collaborate with users to ensure that vulnerability remediation is complete and verify effectiveness of results.
• Assist in researching, compiling, and analyzing technical data.
• Assist with data calls, FISMA reporting, compliance scanning and reporting, continuous monitoring and compiling reports for auditors.
• Contribute to an overall productive and respectful work environment by providing excellent customer service and working in a positive, collegial manner at all times.
• Maintain cooperative and respectful working relationships with Cyber Security Staff, other divisions, and other customers.
• Perform other duties assigned by Management.

Requirements

• Associates degree in MIS, Computer Science or equivalent with at least one year of related experience.
• Knowledge of vulnerability remediation and scanning best practices such as CVE database and the CVSS System used for scoring vulnerabilities.
• Knowledge of network and application security principles such as OWASP Testing Guidelines, OWASP Application Security knowledge framework and ATT&CK framework.
• Understanding of a broad range of Cyber Security principles, protocols, concepts, and theories in a broad range of disciplines.
• Knowledge of Cyber Security vulnerabilities, mitigation strategies, network architecture, and how to apply vendor patches.
• Understanding of the Windows and macOS operating systems.
• Ability to maintain strict confidentiality.
• Ability to communicate effectively in English, both verbally and in writing, sufficient to communicate with co-workers, customers, testify, write clear and concise reports, gather information, and collect information.
• Ability to pass a federal background and obtain a 'Q' Clearance.

Nice-to-haves

• GIAC Enterprise Vulnerability Assessor (GEVA)
• GIAC Security Essentials (GSEC)
• GIAC Information Security Fundamentals (GISF)
• GIAC Foundational Cybersecurity Technologies (GFACT)
• CompTIA Cybersecurity Analyst (CySA+)
• CompTIA Security Plus (Sec+)

Benefits

• Highly competitive salaries and benefits packages including medical, dental, and vision.
• Both a pension and a 401k.
• Paid time off and 96 hours of paid holidays.
• Relocation assistance if located more than 75 miles from work location.
• Tuition assistance and reimbursement.