Cyber Security Analyst

Duties and Responsibilities: Operate, maintain, and administer approved security scanners to plan, create, manage, and retire scheduled or ad hoc scan and scan groups for workloads across NIPRNet and SIPRNet. Develop, distribute, and manage execution against the schedule of vulnerability scans. Monitor, identify, report, and facilitate the resolution of scan performance impacting issues. Maintain and ensure scans, accounts, and configurations are set in accordance with best practice guides and privileged access policies and procedures. Analyze mission requirements and organizational feedback to create, maintain, and improve scan results. Test and evaluate scanning tools and configurations. Maintain client point of contact information, Internet Protocol (IP) ranges, and website/Universal Resource Locator (URL) information on the Data site via Share Point. Create and deliver a Collective Trend Analysis Report and trend analysis including resolution data aimed at influencing the development of security strategies. Schedule, coordinate and perform vulnerability scans. Determine Ports/Protocols and Services Management (PPSM) compliance; provide mitigations, strategies, and false positive determinations. Create and deliver vulnerability scan reports, no later than two weeks after the scan is complete. Reports must include identified vulnerabilities, recommended resolutions/ mitigations, and trend analysis. When initiated by the client, assist with a review of the report (i.e., answer questions, identify what was scanned, assist if assets were skipped).Communicate and validate scan results in accordance with policies and procedures. Help with vulnerability scan related issues/problem resolution with applicable Service desks. Required Experience and

Skills: Minimum 4 years of Cybersecurity experience. Experience utilizing BURP Suite (Enterprise Edition).Experience configuring web browsers (e.g. Chrome, Firefox, etc.).Experience injecting payloads to trigger vulnerabilities (e.g. SQL injection; XSS, Command Injection, Path Traversal, CSRF, IDOR).Skilled at reviewing, interpreting, documenting, and developing mitigation strategy from the scan results. Experience with STIGs and by-product analysis. Proficiency in MS Office Suite products and Share Point collaborative tools. Working knowledge of government cybersecurity policies and procedures. Strong interpersonal and communication skills (oral and written).

Education: A Bachelor’s degree in fields such as Information Technology, Cybersecurity, or Computer Science; Or CEH certification. Certification:8570 IAT Level II (CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CNS, SSCP).Security Clearance: DoD Secret security clearance If you feel you are qualified and want to be considered for this position, please supply the following to: 9jr 4o 39f 3t 649rb 1amg 5d 4zrsr@crelate.net, and please put the job number ‘6781’ in the subject line: Updated resume including MM/YYYY for each employer. Best times/dates to interview (plus phone # you can best be contacted at).Availability to start once given formal offers. Summit Technologies Inc. appreciates your interest. We will contact the best matching prospects and will consider you for future opportunities. We will not submit your resume without your prior knowledge and consent. We are an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity, national origin, disability or veteran status.