Vulnerability Assessment Analyst (ISSE) Level 1

$94,400 - $198,300/Yr

CACI International - Annapolis Junction, MD

Full-time - Entry Level

Annapolis Junction, MD

Professional, Scientific, and Technical Services

About the position

The Vulnerability Assessment Analyst (ISSE) - Level 1 role at CACI involves maintaining and optimizing the Tenable Security Center infrastructure, conducting security assessments, and managing vulnerabilities across various operating systems. The position requires a strong understanding of vulnerability assessment methodologies and tools, as well as the ability to communicate effectively with stakeholders regarding security posture and risks. This role is essential for ensuring the security of customer assets through continuous monitoring and remediation efforts.

Responsibilities

• Maintain and optimize the Tenable Security Center infrastructure.
• Conduct regular security patching, assessments, and scans on Linux Security Center servers using Tenable Nessus.
• Mitigate STIGS/Vulnerabilities on Tenable Linux Security Center Servers and Windows/Linux Nessus Scanning Servers.
• Install and update Tenable Nessus Software on Linux/Windows Scanning Servers.
• Install and update Tenable Security Center Software on Linux Servers.
• Configure and fine-tune scanning policies and asset lists to ensure thorough vulnerability coverage.
• Perform regular vulnerability assessments of multiple device types and Operating Systems using the Tenable Security Center.
• Utilize Nessus Scanning Tool to identify vulnerabilities across customer assets on a Continuous Monitoring basis.
• Review Nessus/ACAS scan results and provide direction where required.
• Analyze scan results and generate comprehensive vulnerability reports.
• Monitor and track vulnerability remediation progress.
• Collaborate with ISS and other teams to ensure timely vulnerability remediation.
• Communicate effectively with stakeholders about the security posture and potential risks.
• Prepare and deliver clear and concise reports to management and stakeholders.
• Maintain accurate records of security incidents and vulnerabilities.

Requirements

• 7 years of experience in vulnerability assessment and management.
• In-depth knowledge of vulnerability assessment methodologies, tools, and best practices.
• Strong analytical and problem-solving abilities, with a keen attention to detail.
• Experience with UNIX and Windows operating systems.
• Familiarity with DISA STIGs, Tenable Audit files, and/or CIS Benchmarks.
• Hands-on operational experience with enterprise vulnerability management and scanning solutions, such as Tenable.
• Knowledge of system and application security threats and vulnerabilities.
• Working knowledge of networking, Linux/Unix, Windows administration, patch deployment, and system configuration.
• IAT Level 1 certification and CompTIA Network+ certification.

Nice-to-haves

• Bachelor's degree in a related field.
• Experience with Tenable Security Center and Nessus Scanning Tool.

Benefits

• Health insurance
• Flexible time off
• Learning and development opportunities
• Competitive compensation
• Comprehensive benefits including healthcare, wellness, financial, retirement, family support, and continuing education.