Cyber Vulnerability Assessment Analyst - Advanced

POSITION SUMMARY

NewSat is seeking an Advanced-level Vulnerability Assessment Analyst (VAA) to support our U.S. Space Force (USSF) customer. This position leads vulnerability assessment and threat analysis activities supporting both existing infrastructure and platform growth through the Authority to Connect (ATC) process to protect a platform spanning more than 42 deployed environments across approximately 900 servers, operating at multiple classification levels.

Operating with little to no guidance, the Advanced VAA plans and executes assessments against the environment to include multiple Amazon Elastic Kubernetes Service (EKS) clusters and numerous non-containerized assets. The analyst prioritizes findings by mission risk, drives remediation with system owners, and provides technical direction to junior assessment staff in complex, unstructured situations. This role directly supports the task order’s Threat Assessment and Risk Mitigation and Continuous Cyber Monitoring service areas.

KEY RESPONSIBILITIES

• Plan, execute, and report on vulnerability assessments across multiple environments spanning CUI, Secret Collateral, and TS/SCI-SAP enclaves.

• Lead scanning, credentialed assessment, and manual validation activities using ACAS/Nessus, STIG/SCAP tooling, and equivalent DoD-approved capabilities.

• Apply DISA STIGs and SRGs to operating systems, containers, and applications; validate compliance and adjudicate false positives.

• Prioritize findings by exploitability and mission impact; develop and track remediation and mitigation plans with system owners and the ISSM/ISSO.

• Support Plan of Action and Milestones (POA&M) development, currency, and closure evidence as part of continuous monitoring.

• Produce Body of Evidence (BoE) artifacts supporting Certificate to Field (CtF), Authority to Connect (ATC) and Authorization to Operate (ATO) activities.

• Assess vulnerabilities in hybrid cloud and container environments, including AWS tenant spaces, EKS clusters, and master-image-provisioned server fleets.

• Provide technical guidance to Basic and Intermediate assessment analysts; review their findings and resolve complex or disputed results.

• Brief assessment results and risk posture to government technical leadership and program stakeholders.

REQUIRED QUALIFICATIONS

• Active TS clearance with SCI eligibility; ability to meet program-directed access requirements.

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related field. Additional relevant experience may be substituted for degree.

• Minimum 9 years of progressive cybersecurity experience with substantial focus on vulnerability assessment and management.

• CISSP, CISM, CySA+ or equivalent DoD 8140 / 8570 baseline certification current at time of hire.

• Demonstrated hands-on expertise with ACAS/Nessus, STIG/SCAP compliance tooling, and enterprise vulnerability management workflows.

• Working knowledge of RMF, NIST SP 800-53, and continuous monitoring processes on DoD or IC systems.

• Demonstrated ability to work independently and provide technical direction to other analysts.

PREFERRED QUALIFICATIONS

• Prior experience supporting USSF, Space RCO, or satellite ground system programs.

• Advanced degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related field.

• Experience assessing containerized and cloud-native workloads (Kubernetes/EKS, AWS).

• Familiarity with penetration testing, red team support, or adversary emulation.

• Scripting proficiency (Python, PowerShell, Bash) for assessment automation and data reduction.

NewSat provides cost-competitive, best-of-breed, global C5ISR solutions to ensure mission success for our customers. Our small business provides solutions to many industry partners, both as a prime contractor and value-added subcontractor.