Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America. RMC is hiring a Web Application Vulnerability Assessor to support our government customer in Quantico, VA. The selected applicant will perform a variety of activities including but not limited to: * Providing capabilities necessary to discover vulnerabilities in both internal and public-facing web applications and web security appliances through no-notice and cooperative security assessments and automated scanning.
* Manually validate vulnerabilities found during automated scanning and open records for those validated findings.
* Implementing repeatable and documented assessment methodology.
* Performing manual web application penetration tests on both internal and external systems to identify vulnerabilities.
* Operating automated web application vulnerability scanning and situational awareness tools.
* Analyzing findings and developing risk mitigation techniques to address weaknesses.
* Validating the remediation of findings reported by system owners.
* Advising system owners on strategies for remediating vulnerabilities when necessary.
* Evaluating systems and applications for compliance with applicable policies.
* Providing reports detailing findings from each manual pen testing campaign.
* Providing support required to maintain the customer's CSSP accreditation per the standards.
Requirements: * Associate's degree in technical field and five years of computer programming experience.
* Applicant selected must hold a current valid IAT Level II certification. Candidate selected must maintain the required IAT Level II compliant certification. Certification Requirements: This position will require DoD 8140.03 IAT Level II compliance.
* An active DoD TS/SCI clearance is required to start. Applicant selected may be subject to a security investigation and must meet eligibility requirements for access to classified information.
RMC employees may be subject to COVID-19 vaccination or testing requirements in order to access government facilities.