4024 Vulnerability Remediation Specialist

OVERVIEW:

Manage and independently detect, prioritize, and remediate identified vulnerabilities across applications, endpoints, databases, networking devices, and mobile, cloud and third-party assets. Administer software deployment tools such as SCCM, PDQ, Group Policy, PowerShell scripts, etc. to deploy software/patches and apply configuration changes necessary to remediate vulnerabilities. Support and monitor patch management compliance across the infrastructure to align to audit requirements. Participate in the weekly vulnerability remediation planning meetings.

REQUIRED QUALIFICATIONS:

• Able to deploy, monitor, troubleshoot, and maintain end point client health to ensure patching compliance.
• Able to apply DISA STIGs for Operating Systems and applications and remediate compliance variances.
• Ability to leverage vulnerability database sources to understand weaknesses and their probability and remediation options, including vendor-supplied fixes and workarounds.
• Able to actively collaborate with ISSO to develop, maintain, and enhance cyber security controls.
• Can collaborate with security groups such as red teams, threat intelligence and risk management to form a holistic team dedicated to thwarting attackers and reducing attack surface.
• Able to assist multiple teams on the implementation of configuration management for security hardening.
• Ability to work as a team to consistently learn and share advanced skills and foster team excellence.
• Possess an understanding of NIST 800-53 Security Controls and how they are used to harden computers, databases, and network devices.
• Possess a thorough understanding of Group Policy Objects and how they are implemented and used to harden computers.
• At least 5+ years of IT experience with a bachelor's degree in computer science, Systems Engineering, Engineering, or other related field preferred. An additional four (4) years of experience as a Vulnerability Remediation Specialist or similar experience may be substituted for the bachelor's degree.
• Current DoD 8750 IAT Level II Certification (CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, or SSCP).

CLEARANCE:

• TS/SCI minimum