Vulnerability Management Analyst

Overview

Electric Boat Information Technology (EB IT) is responsible for Electric Boat's enterprise and special use information systems, such as product design environments, collaboration platforms, and office productivity suites.  EB IT supports over 20,000 end-users in a wide variety of work environments, networks and locations. Electric Boat Information Technology is pursuing an Infrastructure Support Engineer/Analyst to support a multi-year strategy to modernize the company's IT infrastructure within a robust cybersecurity environment.

Candidates can expect to perform project oversight activities as well as privilege access work.  Candidates will need to be familiar with Microsoft products, ServiceNow (SECOPS), Tenable, and Nessus Manager. A successful candidate will work with a joint team of EB IT, Cybersecurity, and Customer Support Center personnel to implement, remediate, monitor, and improve Electric Boat's IT systems.

Position Summary:

An EB IT Vulnerability Management Analyst will apply IT knowledge and expertise in multiple demanding fast-paced design, engineering and construction environments, including but not limited to the following areas:

• Collaborate with various IT teams to conduct vulnerability scans in support of project requirements
• Support security audits and vulnerability assessments
• Conduct regular Nessus/Tenable vulnerability and compliance scans for proactive risk mitigation.
• Partner with IT stakeholders to deliver tailored vulnerability remediation plans
• Uphold organizational security posture
• Contribute to the accelerated patching plan that improves vulnerability resolution timelines

Qualifications

Required:

• Associates degree, High School Diploma or equivalent
• Candidate is required to hold an Active Final Secret Security Clearance with the DoD (Cannot be Interim Secret or below)
• 3 years of IT engineering and operations experience
• CompTIA A Certification
• CompTIA Security Certification

Preferred:

• CompTIA Network Certification
• Experience with Electric Boat’s Cyber Risk Acceptance Board (CRAB) process
• Experience with Electric Boat’s Classified Change Management process
• Detailed understanding of Tenable platform
• Detailed understanding of Nessus manager
• Understanding of ServiceNow SECOPS and Qradar
• Understanding of Risk Management Framework (RMF) requirements for DoD classified information systems
• Understanding of Electric Boat’s Harding process to DISA Security Technical Implementation Guide (STIG) controls as they relate to RMF

Skills

• Effective communication
• Adaptability in fast-paced environment
• Ability to present to executive stakeholders
• Risk based vulnerability prioritization

Environmental Attributes