Senior Vulnerability Engineer

Job description

**Be Challenged and Make a Difference** In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture. **Description of Task to be Performed:** AnaVation is seeking a Senior Vulnerability Engineer to join our team and support our mission critical customer in Reston, VA. As our Senior Vulnerability Engineer, you will provide Subject Matter Expertise support to maintain Vulnerability Management Program requirements including, but not limited to, maintaining the patch repository, issuing alerts and bulletins, and tracking compliance. Additional responsibilities would include coordinating periodic auditing and testing and responsibility for overall governance supporting Vulnerability Management. ### Required Qualifications: - **Clearance:** Top Secret SCI, Counterintelligence (CI) Polygraph - **Education:** Bachelor’s degree in Computer Science or relevant field and 8+ years of experience related to specific functional area. (May substitute Master’s degree in lieu of 2 years of experience). - **Certifications:**  CySA+ or equivalent IAT Level II certification - **Location:**100% on-site position in Reston, VA. - **Experience:** - Working collaboratively across cross-functional teams of all experience levels. - Detailed knowledge of system security vulnerabilities and remediation techniques, including testing and the development of exploits. - Detailed technical knowledge in security engineering, system and network security, authentication, and security protocols. - Skilled in risk management, business risk analysis, and making complex business/risk trade-off recommendations and decisions. - Experience in penetration testing and vulnerability analysis in modern technologies such as cloud, mobile, wireless, and cross domain solutions. - In depth knowledge and experience working with Assured Compliance Assessment Solution (ACAS) scanning environments. - Thorough understanding of DevSecOps Pipeline scanning in supporting development and alerting thresholds. - Solid understanding of Penetration Testing environments and Cloud tools. - Ability to provide recommendations for enhancing Detection and Alerting thresholds and Insider Threat capabilities. ### Preferred Qualifications: - Security certifications: Security+, CCNA Security, CySA+, SSCP, CCSP, or equivalent certification - AWS, Cloud certifications - 4+ years experience with Tenable - Strong experience and ability to present technical concepts and updates to senior leaders