[Hiring] Vulnerability Management / Cyber Operations Analyst @Dunhill Solutions

Role Description

Dunhill Government Solutions is hiring a Vulnerability Management / Cyber Operations Analyst to support a federal agency's cybersecurity operations. This is a full-time, fully remote (telework) role.

• Run vulnerability scans; analyze and validate security vulnerabilities and prioritize risks in line with federal Binding Operational Directive (BOD) guidance.
• Coordinate remediation with infrastructure and application teams, verify remediation and closure, document false positives, manage risk acceptances and coordinate vulnerability reporting.
• Monitor network traffic, system and audit logs and security alerts for suspicious activity.
• Investigate suspected and confirmed security breaches, find the root cause, stop active attacks and trace the full impact (“blast radius”) of a threat through complex log data.
• Support threat analysis and digital forensic activities; troubleshoot quickly when a breach or system failure occurs.
• Create cyber-intelligence tools and methods and perform research and analysis to mitigate and eliminate data and cyber security risks.
• Design and develop acceptance criteria for cybersecurity architecture.
• Support current cyber initiatives and requirements, including audit logging, zero trust architecture and encryption.
• Take part in periodic reviews of each system’s audits and monitor corrective actions until every action is closed.
• Document security events, write incident reports and recommend upgrades to management.
• Create security standards and best practices for employees, and explain technical risks and security guidelines clearly to non-technical staff and management.

Qualifications

• Bachelor’s degree in Computer Science or a related field, or equivalent experience.
• 5-10 years of experience in systems security.
• Security certification such as Security+, CEH, CISSP or other application vendor certifications.
• Understanding of network protocols, operating systems (Windows, Linux) and security tools such as SIEM (Security Information and Event Management).
• Familiarity with Tenable Security Center / Nessus scanners.
• Knowledge of federal cybersecurity policy and guidance, including OMB, Executive Orders and the NIST 800 series.
• Advanced knowledge of encryption, vulnerability assessment, penetration testing, cyber forensics, intrusion detection, and incident response and remediation.
• Scripting skills to integrate with security tools and dashboards, plus governance, policy process and documentation skills.
• Excellent attention to detail and the ability to balance multiple tasks simultaneously.
• US citizen (no dual citizenship, per agency requirements).

Location

• Remote (full-time telework), United States.
• US Citizenship and the ability to pass a federal background investigation in order to be granted access to sensitive information.

Compensation

• $135,000 - $170,000 per year.