Vulnerability Scan Assessment Cybersecurity Jobs

1 job found

Today

Cybersecurity Analyst (MSIC)

COLSA Corporation Huntsville, AL

Huntsville, AL

Today

Full time Cybersecurity Tools Information Security Information Technology (IT)

Apply Now

Job Description

COLSA Corporation seeks Cybersecurity Analysts for a dual-role ISSE/ISSO assignment supporting design, integration, and formal authorization of complex DoD information systems to achieve and maintain an ATO.

Responsibilities

Integrate cybersecurity requirements into the System Development Life Cycle (SDLC); design and evaluate security architectures for alignment with NIST 800-53 and DoD Cyber-survivability requirements.
Lead the end-to-end Risk Management Framework (RMF) process, including system categorization, control selection, implementation, and continuous monitoring within approved software.
Author, maintain, and support a complete Security Authorization Package, including:
- System Security Plan (SSP)
- Security Assessment Report (SAR)
- Risk Assessment Report (RAR)
- Security Control Traceability Matrix (SCTM)
Apply Security Technical Implementation Guides (STIGs) and address Information Assurance Vulnerability Alerts (IAVA).
Conduct root-cause analysis on vulnerability scan results from ACAS/Nessus and develop mitigation strategies.
Perform formal risk assessments, document residual risks, and manage Plan of Action and Milestones (POA&M) to drive timely closure of findings.

Requirements

Associate’s degree in Cybersecurity, Information Technology, or a related field (or equivalent experience).
Minimum 0–12 years of related experience; level may vary based on education and experience.
Active baseline certification: CompTIA Security+ CE, ISC2 SSCP, or an equivalent certification.
Deep knowledge of NIST 800-53 security controls and technical implementation.
Demonstrated experience managing vulnerabilities in DoD environments.
Specialized experience authoring and reviewing high-stakes security artifacts, including:
- System Security Plans (SSP)
- Security Assessment Reports (SAR)
- Security Control Traceability Matrices (SCTM)
Ability to communicate complex cybersecurity situations to non-technical leadership in an actionable format.
U.S. Citizenship required.
Must possess an active DoD Top Secret clearance with SCI eligibility.
Must successfully complete a Counterintelligence (CI) Polygraph within 180 days of hire and meet eligibility requirements for Special Access Programs (SAP).

Technologies

NIST 800-53
DoD Cyber-survivability requirements
System Development Life Cycle (SDLC)
Risk Management Framework (RMF)
ACAS, Nessus
STIGs
IAVA
SCCM
WMI
PowerShell
SCAP Compliance Checker (SCC)

Preferred Qualifications

Active DoD Top Secret clearance with SCI and a CI Polygraph, plus willingness to meet SAP eligibility requirements.
Active ISC2 CISSP.
Expertise using enterprise tools such as SCCM, WMI, and PowerShell to automate security patch and configuration deployments across workstations and servers.
Proficiency with ACAS (Nessus) and SCAP Compliance Checker (SCC) for vulnerability identification, root-cause analysis, and determining system applicability and risk.
System administration security experience is a plus.

Location: Huntsville, AL (on-site)

Position Type: Dual-role ISSE/ISSO supporting DoD RMF and ATO.

View full job page →

Get Vulnerability Scan Assessment Cybersecurity Jobs alerts

New Vulnerability Scan Assessment Cybersecurity Jobs, daily.