Amyx is seeking to hire a Vulnerability Assessment Analyst to join our intel client's program in Springfield, VA.

As a member of the  Cybersecurity Vulnerability Management team, the contractor executes the Vulnerability Management aspect of the Risk Management Framework (RMF) in accordance with NIST SP 800-37 Rev. 2, or subsequent versions, and the client's RMF Implementation Guide (RIG) for client authorized systems. This position supports the client in Springfield, Virginia, and is on-site only; remote or hybrid work is not authorized.

• Perform assessments of systems and networks within the network environment or enclave and identify deviations from approved configurations, enclave policy, or local policy.
• Review, promulgate, and track Cyber Task Orders; coordinate with relevant information system owners to resolve findings.
• Develop measures of effectiveness for defense-in-depth architectures against known vulnerabilities.
• Identify systemic security issues through analysis of vulnerability and configuration-compliance data, including Security Technical Implementation Guide (STIG) data.
• Prioritize vulnerability-reduction activities based on threat data, vulnerability severity, mission criticality, and applicable policy requirements.
• Conduct vulnerability scans, validate findings, coordinate remediation tracking, and verify closure.
• Analyze web application vulnerability assessments and recommend remediation actions for known vulnerabilities and misconfigurations.
• Apply cybersecurity and privacy principles to organizational requirements, including confidentiality, integrity, availability, authentication, and non-repudiation.
•  
• Must have the ability to communicate accurate information

• TS/SCI eligibility, subject to a Counterintelligence (CI) Polygraph.
• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• In lieu of a degree, candidates may qualify through relevant experience combined with one of the following certifications: Security+, PenTest+, GSEC, GICSP, GCSA, GCIH, GCED, FITSP-A, CPTE, Cloud+, RCCE Level 1, or CEH (Practical).
• Experience in vulnerability management using tools such as Nessus, ACAS, or Tenable.
• Knowledge of computer networking concepts and protocols, network-security methodologies, and risk-management processes.
• Knowledge of cyber threats, vulnerabilities, and the operational impacts of cybersecurity lapses.
• Knowledge of cryptography and cryptographic key management.
• Knowledge of network attacks and their relationship to threats and vulnerabilities.
• Knowledge of applicable cybersecurity policies, compliance requirements, and assessment guidance for vulnerability management, cyber defense auditing, and RMF implementation.
• Ability to collaborate with IT asset owners to develop accurate, actionable vulnerability-remediation plans using a positive customer-service approach.
• Ability to analyze vulnerability data, identify discrepancies and trends, and support continuous improvement of vulnerability-management processes.
• Demonstrated attention to detail in validating scan results, remediation evidence, system documentation, and corrective actions.

Benefits include:

• Medical, Dental, and Vision Plans (PPO & HSA options available)
• Flexible Spending Accounts (Health Care & Dependent Care FSA)
• Health Savings Account (HSA)
• 401(k) with matching contributions
• Roth
• Qualified Transportation Expense with matching contributions
• Short Term Disability
• Long Term Disability
• Life and Accidental Death & Dismemberment
• Basic & Voluntary Life Insurance
• Wellness Program
• PTO
• 11 Holidays
• Professional Development Reimbursement

Please contact talent@amyx.com with any questions!

Amyx is proud to be an Equal Opportunity Employer.  All qualified candidates will be considered without regard to race, color, religion, national origin, age, disability, sexual orientation, gender identity, status as a protected veteran, or any other characteristic protected by law. Amyx is a VEVRAA federal contractor and we request priority referral of veterans.

Physical Demands

Employee needs to be able to sit at a workstation for extended periods; use hand(s) to handle or feel objects, tools, or controls; reach with hands and arms; talk and hear. Most positions require ability to work on desktop or laptop computer for extended periods of time reading, reviewing/analyzing information, and providing recommendations, summaries and/or reports in written format. Must be able to effectively communicate with others verbally and in writing. Employee may be required to occasionally lift and/or move moderate amounts of weight, typically less than 20 pounds. Regular and predictable attendance is essential.