Vulnerability Analyst

Company Description

Quantum Dynamics, Inc. (Quantum) is a Women-Owned, Small Disadvantaged Business that is SBA certified, headquartered in Macon, Georgia. The company is a service-oriented firm with a rich corporate history of quality, responsive service and multi-disciplinary staff having the requisite education, specialized training, and experience to meet the exact needs of all their clients. Quantum focuses on providing quality Cybersecurity, Engineering, Information Technology, Logistics, Business Management, and Technical Support Services to professional, government, and scientific organizations.

Job Description

Detects weaknesses in networks and software and takes action to correct and strengthen security within the system. Duties include:

• Develops risk-based mitigation strategies for networks, operating systems, and applications
• Compiles and tracks vulnerabilities and mitigation results to quantify program effectiveness
• Creates and maintains vulnerability management policies, procedures, and training
• Review and define requirements for information security solutions
• Organize network-based scans to identify possible network security attacks and host-based scans to identify vulnerabilities in workstations, servers, and other network hosts.
• Conduct vulnerability assessments for networks, applications, and operating systems
• Use automated tools to identify vulnerabilities
• Use manual testing techniques and methods to reduce false negatives
• Develop, test, and modify custom scripts and applications for vulnerability testing
• Manually validate report findings to reduce false positives
• Compile and track vulnerabilities
• Write and present reports
• Develop and maintain a vulnerability assessment database

Qualifications

• Minimum of five (5) years’ experience working in Vulnerability Management
• Hands-on knowledge of CVSS, CVE, PCI and other Vulnerability Management standards
• Advanced data manipulation and reporting in Excel
• Application and code scanning
• Basic Knowledge of networking and network infrastructure
• Experience with scanning and auditing utilizing tools such as Tenable, Tanium, Tripwire
• Able to obtain and maintain security clearance
• Industry certifications such as C|EH, Tenable, Security+, CAP

Additional Information

All your information will be kept confidential according to EEO guidelines.