Senior Vulnerability Assessment Engineer

AGE Solutions is looking for a Senior Vulnerability Assessment Engineer to join our team in support of an upcoming cybersecurity risk management and assessment program with our DoD customer.

Individuals in this role must be available to work on-site at Ft. Meade, MD for the majority of the workweek.

Responsibilities Include:

• Complete a monthly average of 25 new Vulnerability Assessment (VA) reports, 25 VA TRP, and 15 VA reviews; and an annual average of 50 Exceptions; and 100 CLSA.
• Use a tracking tool provided by the Government to document the progress of each VA as it moves through the stages of the VA process.
• The contractor shall update VA reports and the CAL.
• Provide a long-range VA assignment/scheduling document (Future's List) that shall be used to announce and track VA reports through the approval process.
• Develop technical papers describing security configuration and implementation strategies and compliance issues identified during analysis for coordination with the appropriate Industry Partners, PMs, Services, and Agencies.
• Provide a tracking summary detailing the progress of CLSAs and FAs, and VAs
• Ensure all junior VA analysts are mentored by a senior analyst and provided the PPSM Training manual. Provide the PPSM Chair with a detailed training schedule for the junior analyst until they are promoted to senior analyst.
• Conduct VA and IA security engineering analysis of PPS, security configuration / implementation strategies, and create VA reports.
• Create tickets for VA reviews and Emergency Exceptions.
• Create, monitor, edit, and close tracking numbers as part of the life cycle of the work; to include a notification mechanism of the status of a tracked ticket.

Requirements:

• Bachelor's degree (IT-related field preferred)
• Eight (8) years of vulnerability management or IT security, with a focus on vulnerability scanning and assessment.
• Have an active DoD Secret clearance
• DoD 8570 IAM/IA Technical (IAT) Level III certification**
• Strong understanding of Windows, Linux, and Unix environments
• Strong understanding of TCP/IP, DNS, firewalls, NAT, VPNs, and routing protocols.
• Demonstrable hands-on experience with vulnerability scanning tools (e.g., Nessus, Qualys, Rapid7, etc.) and experience configuring them for optimal performance
• Advanced understanding of CVEs, CVSS scoring, and how to use resources like NVD or Exploit DB
• Excellent written and verbal communication for technical documentation and stakeholder engagement

Compensation: $145,000 - $155,000