Vulnerability Analysis Specialist

Description

We have an immediate opportunity for a Vulnerability Analysis Specialist to join our team supporting the National Institute of Standards and Technology (NIST). We are seeking applicants who have a deep interest in cybersecurity and a desire to make an impact to solve tough problems. Through innovative ideas and collaboration, we seek to improve the security of software systems by determining critical security flaws and providing solutions to manage the vulnerability.

Develop risk-based mitigation strategies for networks, operating systems, and applications.

Review and define requirements for information security solutions.

Conduct daily searches and triage vulnerabilities in online repositories (open-source, vulnerability reports, and vendors' security advisories) that contain relevant vulnerability information to identify newly listed vulnerabilities.

Conduct regular scoring of vulnerabilities to enable triage and prioritization using Common Vulnerability Scoring System (CVSS).

Prepare and deliver complex IT security reports that can be easily understood by executives and other stakeholders.

Coordinate, monitor, and support activities and procedures in the vulnerability management program.

Requirements

Applicable or educational experience as a system or network administrator, software developer, or similar technical occupation

Fundamental understanding of common computer, network, and internet technologies, including basic computer architecture and common network protocols

Vulnerabilities and software security in general

Vulnerability assessment and discovery

Internet security issues including common security technology

Software development

Basic cryptography

Broad communications skills, including writing, speaking, explaining complex technical issues, working with parties in conflict

Logic and reasoning, separate evidence from opinion, decision-making under uncertainty

Attention to detail

Creative problem solving

Recognize and properly handle confidential and sensitive information

Excellent written and verbal communication skills

Proficient in Microsoft Office Suite to include Teams or similar workplace chat and videoconferencing tools