Sr. Security Vulnerability Analyst

TO-693 Sr. Security Vulnerability Analyst
Contract Through the end of the year, with the possibility of extension.
Citizenship required: Yes
Place of Performance: On-site at FRB locations, Washington, DC METRO Campus
Rate: $60-70/Hr C2C
Senior Security Vulnerability Analyst (Artificial Intelligence)

Position Overview

We are seeking up to three (3) Security Vulnerability Analysts with experience implementing artificial intelligence (AI) for vulnerability scanning, patch management, risk management, and threat modeling. The ideal candidate will have deep expertise with traditional vulnerability management practices, activities, and technologies. The ideal candidate will also have experience working with a variety of AI technologies and models for vulnerability management. This position will require the development and delivery of AI-enabled vulnerability management processes, tools, and capabilities.

Key Responsibilities

• Implement AI-enabled solutions for vulnerability management and adapt existing processes to integrate emerging AI capabilities into standard operations.
• Provide key requirements, observations, design suggestions, and artifacts to inform the development of AI technologies that will support the adoption of AI technology into the existing vulnerability management program.
• Analyze the output of AI models designed to detect vulnerabilities in hardware, software and cloud-resident systems and suggest remediation strategies to reduce risk and close gaps.
• Create, configure, and execute vulnerability scans of Board workstations, servers, and network devices and identify and deliver solutions to integrate AI into existing processes.
• Abide by all governance and standards as defined by the Board or levied by external entities to remain compliant with all requirements when implementing AI solutions.
• Develop analytic products and reports that demonstrate the effectiveness of AI-enabled vulnerability management practices to include metrics and technical vulnerability analysis reports.

Required Qualifications

• 5+ years of hands-on vulnerability management experience that includes use of technologies such as Tenable Nessus, GitLab vulnerability scanning features, Fortify, Invicti, Mandiant MSV, etc.
• 3+ years of hands-on vulnerability management experience that includes cloud resident technologies in Amazon Web Services, Microsoft Azure, Service Now, etc.
• Hands on experience implementing AI solutions for vulnerability management.
• Experience analyzing data and software to identify vulnerabilities.
• Experience collaborating with key stakeholders to assess, prioritize, and develop actionable plans to address the discovered gaps.

Preferred Qualifications

• Experience building consensus around vulnerability management policies and procedures.
• Demonstrated experience implementing AI-enabled vulnerability management solutions in a hybrid environment.
• Experience operating in government environments that follow NIST, FISMA, FedRAMP, and OMB guidance.

Strong problem-solving and analytical skills