What are the responsibilities and job description for the Risk and Vulnerability Analyst position at MANTECH?
MANTECH seeks a motivated, career, and team-oriented Risk and Vulnerability Analyst to support a DHS customer in Chandler, AZ OR the National Capital Region.
As part of this mission, you will help the organization maintain its prestigious designation as a Cybersecurity Service Provider (CSP) and Center of Excellence (COE). Our team provides comprehensive, 24/7/365 security services supporting an expansive network across LANs, WANs, and advanced Cloud-based infrastructures. This is a unique opportunity to utilize a "kill chain" process to thwart Advanced Persistent Threats (APT) and implement cutting-edge technologies like Zero Trust Architecture, AI/ML risk mitigation, and Post-Quantum Computing readiness.
Responsibilities Include But Are Not Limited To
As part of this mission, you will help the organization maintain its prestigious designation as a Cybersecurity Service Provider (CSP) and Center of Excellence (COE). Our team provides comprehensive, 24/7/365 security services supporting an expansive network across LANs, WANs, and advanced Cloud-based infrastructures. This is a unique opportunity to utilize a "kill chain" process to thwart Advanced Persistent Threats (APT) and implement cutting-edge technologies like Zero Trust Architecture, AI/ML risk mitigation, and Post-Quantum Computing readiness.
Responsibilities Include But Are Not Limited To
- Conduct ad-hoc and automated scans for OS, Database, API, and Web applications.
- Monitor and maintain the master scan schedule and remediation tracking portal.
- Conduct ISVM compliance validation and CVE assessments. Collaborate with the DHS NOSC on enterprise-level vulnerability tasks.
- Bachelor's Degree.
- 3 years of security-related experience with automated scanning tools.
- Experience with Information Security Vulnerability Management (ISVM) scans and compliance.
- Must possess any 1 of the following: Security , CompTIA CySA (Cybersecurity
- Analyst), CEH (Certified Ethical Hacker), or GIAC Global Industrial Cyber Security Professional (GICSP) from the DOD 8570 list (or other similar certifications as approved by Government)
- Experience with Cloud compliance scans and API discovery/scanning.
- Experience with post-quantum computing assessment/implementation
- Must be a U.S. Citizen.
- Must be able to obtain and maintain a Secret Clearance.
- Must be able to obtain and maintain an ICE Entry on Duty (EOD) Suitability.
- Must be able to remain in a stationary position 50% of the time.
- Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers and customers.