Vulnerability Management Specialist- Active Secret Clearance Required at VETS, Inc

This position is located in Beltsville, MD and will be onsite 5 days a week. No hybrid/telework allowed.

Responsibilities:

• Conduct Vulnerability Scans and Assessments: Perform ad-hoc scans on networks, operating systems, and applications using automated tools detect security weaknesses.
• Analyze and Prioritize Vulnerabilities: Review scan results, analyze potential impacts on business operations, and prioritize vulnerabilities based on risk and severity ratings.
• Coordinate Remediation Efforts: Collaborate with IT, and other technical teams to develop and implement effective remediation plans, such as patch management or configuration changes.
• Track and Document Findings: Maintain detailed records of identified vulnerabilities, assessment results, and remediation actions using tracking systems to quantify program effectiveness and ensure accountability.
• Manage vulnerability lifecycle: Oversee the entire lifecycle of vulnerability, from discovery to closure, using structured processes.
• Monitor and Stay Updated: Continuously monitor the threat landscape, stay current with the latest security threats and emerging vulnerabilities (e.g., CVE databases), and tune detection signatures to improve identification.
• Report to Stakeholders: Generate detailed reports and communicate vulnerability findings, risk levels, and remediation status to both technical and non-technical stakeholders, including management and compliance officers.
• Develop and Enforce Policies: Contribute to the creation and maintenance of vulnerability management policies, procedures, and standards to ensure compliance with relevant regulations.
• Support Incident Response: Assist in investigating and resolving security incidents, providing expertise on vulnerability exploitation and mitigation.
• Deliver technical Subject Matter Expertise: Deliver technical support and training to end-users and internal teams, fostering a knowledgeable user base. Maintain comprehensive documentation of system configurations, procedures, and change management activities.

Qualifications:

Required Qualifications:

• Bachelor’s degree and 5 years of relevant experience. An additional 4 years of relevant experience may be substituted in lieu of the degree requirement.
• Currently possess one of the following certifications:
• CAP; CASP+ CE; CCISO; CCNA-Security; CISM; CISSP (or Associate); CND; CSSLP; CySA+ ; GICSP; GSEC; GSLC; Security+ CE; SSCP; PPDA; Agile IC; SNOW App Dev
• Experience in technical planning, system integration, verification and validation, risks, and supportability and effectiveness analyses for total systems.
• Skilled at performing analysis at all levels of total system products to include concept, design, fabrication, test, installation, operation, maintenance, and disposal.
• Demonstrated strong analytical and problem-solving skills.
• Demonstrated excellent communication and collaboration skills to work with various teams.
• Detail-oriented and organized with strong follow-up skills.
• U.S. citizenship required.
• Active Secret security clearance required.
• The ability to obtain a final Top-Secret Clearance with SCI eligibility.

EEO Statement