
Description
Description
SAIC is seeking a Vulnerability Management Analyst to join our team providing Security Operations Services for a major state & local government customer located in Texas. This position reports to our Technical Director. This position will be responsible for vulnerability management in a complex, multi-supplier environment. The customer is in the Central time zone so the successful candidate will need to work during normal customer business hours (8am-5pm CT.)
Primary job responsibilities include:
- Provide functional ownership of the Vulnerability Management program and align it with business objectives, security policies, and contractual requirements
- Lead the identification, implementation, and evaluation of vulnerability management best practices across multiple providers
- Recommend improvements to vulnerability management processes, work instructions, reporting & analytics, toolsets, etc, in order to demonstrate vulnerability management expertise and leadership.
- Evaluate the effectiveness of vulnerability scanning and follow-up activities for multiple providers and provide feedback and recommendations for continual improvement
- Communicate and interact with other vendors & customer agencies to ensure vulnerabilities and configuration compliance findings are remediated in a timely manner
- Communicate and interact with customer to ensure they understand vulnerabilities in their environment
- Provide subject matter expertise for threats, risk, and impacts to the environment in multiple capacities
- Work with other SecOps team members to ensure SAIC systems are patched according to approved schedule and requirements
- Contribute to successful completion of vulnerability-related SLAs and deliverables, including those that have child deliverables from other vendors
- Leverage ServiceNow for management and tracking of vulnerabilities, remediation & refresh plans, incidents, and service requests.
- Provide expertise in the ServiceNow vulnerability module related to classification, assignment, and management of vulnerabilities.
- Provide input and assessment of new risks and recommend actions related to vulnerability and management
- Provide reviews, reports, communication, and engagement with stakeholders and management
- Provide support for business continuity and disaster recovery activities
- Provide support for deliverables, SLAs, and other requirements
- Provide input into and maintenance of policy, procedures, job aid documentation, and other technical documentation
- Assist in the development and delivery of training materials for technical staff and customers
- Participate in security audits, compliance assessments, and documentation reviews providing expertise and support regarding vulnerability management
Secondary job responsibilities include:
- Providing backup support for the Risk Management and Configuration Compliance functions as needed.
Qualifications
Required:
- Ability and willingness to be on-call after hours for security incidents requiring vulnerability management support.
- Bachelor's degree in a relevant field of study (e.g. Cybersecurity, Information Systems, Computer Science, etc.) and two (2) or more years of relevant experience; Master's degree in a relevant field of study and zero (0) or more years of relevant experience
- At least one industry-recognized entry-level cybersecurity certification (e.g., CompTIA Security+, ISC2 Certified in Cybersecurity, ISC2 , etc.) required on day one.
- Ability to communicate technical concepts in an understandable manner to non-technical people
- Excellent oral and written communication skills.
Preferred:
- Experience with ITIL, and/or ITIL certification
- Experience with current versions of Tenable.io and Qualys
- Experience with current versions of ServiceNow Vulnerability Response, Risk and Configuration Compliance modules
- Cybersecurity certifications such as SSCP, CCSP, CISM, CRISC, CISSP
- Experience with Cyber Risk Management
- Experience with Configuration Compliance Management
Target salary range: $80,001 - $120,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.
Apply on company website