What are the responsibilities and job description for the System Vulnerability Analyst 3 position at GRVTY?
What Impact You'll Have
GRVTY is seeking experienced System Vulnerability Analyst to identify vulnerabilities of an attacks to the design and operation of a system (H/W, S/W. personnel, procedures, logistics, and physical security) by relating vulnerabilities and attacks to effects on operations and missions supported by those systems.
What You'll be Owning
- Compare and contrast various system attack techniques and develop operationally effective countermeasures.
- Produce formal and informal reports, briefings, and perspectives of actual and potential attacks against the systems or missions being studied.
- Occasional OCONUS travel is required.
The Level 3 System Vulnerability Analyst shall possess the following capabilities:
- The ability to exploit captured media and/or investigate computer security incidents in order to derive useful intelligence and/or enable mitigation of network vulnerabilities.
- Relevant experience must be in the design/development of computer or information systems, programming, computer/network security, vulnerability analysis, penetration testing, computer forensics, and/or systems engineering.
What You Must Have
- Doctoral degree with 4 years of relevant experience.
- Master's degree with 6 years of relevant experience.
- Bachelor's degree with 8 years of relevant experience.
- Associates degree with 10 years of relevant experience.
- Degree must be in Computer Science or a related field (e.g. General Engineering, Computer Engineering, System Engineering, Mathematics, Computer Forensics, Cyber Security, Information Technology, Information Assurance, and Information Security).
- Completion of military training in a relevant area such as JCAC (Joint Cyber Analysis Course), Undergraduate Training (UTC), Network Ware Bridge Course (NWBC)/ Intermediate Network Warfare Training (INWT), Cyber Defense Operations will be considered towards the relevant experience required (i.e. 20-24 weeks course will count as 6 months of experience, 10-14 weeks will count as 3 months of experience).
- Red Team experience is required.
- Analyst should be comfortable with network analysis, network anomaly detection, IOC's Mitre Attack framework, AMOD tools, and be able to analyze data to discover malicious or unauthorized activity collected from various sources.
- Zero Trust experience related to CNE/CNO, network infrastructure, architecture, and hardening is a plus.
- Blue or Purple team experience is a plus.
Certification Required
- Information Assurance Certification may be required.