Vulnerability Management (Engineer Network 4) at Softworld Inc

Job Title: Vulnerability Management (Engineer Network 4)

Location: Langley AFB VA 23665

Onsite Requirements:

• Nessus Tenable
• Scap
• Vulnerability Scanning

Job Responsibilities:

The Vulnerability Management Engineer will:

• Analyze, validate, demonstrate, and adjust severity of vulnerabilities based on actual risk to the organization.
• Document guidance to provide clarity about our vulnerability reporting and remediation processes.
• Refine the secure coding and secure cloud configuration guidance and standards provided to engineers.
• Develop innovative strategies to drive engineering to prioritize fixing issues, from most important to least, while reinforcing best practices in infrastructure, container dependency upgrades and 3rd-party library patching
• Evaluate, select, and manage effective tools for detecting and managing security vulnerabilities.
• Take a "hands-on" approach to build automated integrations with security tools, as well as solutions to inventory, monitor, and report on vulnerability process maturity to leadership and other stakeholders.
• Assist in shifting the culture toward "security by design" by performing root cause analysis (RCA) on the vulnerabilities and recommending improvements in process and habits to prevent issues from recurring.
• Demonstrate satisfaction of internal policy and compliance requirements for SLAs by tracking metrics such as MTTR, vulnerability escape rate, and other SDLC and/or CI/CD pipeline measurements.

Minimum Qualifications:

• 9 years relevant experience with Bachelors in related field; 7 years relevant experience with Masters in related field; or High School Diploma or equivalent and 13 years relevant experience.
• Experience with multiple scanners - Nessus Tenable, SCAP
• Experience maintaining a scanning environment.
• Candidate must have an active TS/SCI clearance.

Preferred Requirements

• Bachelor's degree highly preferred in computer science