Sign upLog in
IT Jobs in Vancouver, WA

System Administrator 3 - - Control Center Cyber Vulnerability

APR Staffing
  • Vancouver, WA
  • Instant Apply
3 days ago

Job Description

Job Title: System Administrator 3 - Control Center Cyber Vulnerability
Job Number: 12123
Location: Vancouver, WA
Onsite: 5 days per Week, Onsite/In person work is required due to compliance and regulatory requirements. 

Overtime: 10%
Travel: Up to 10% local and field offices
Length: Up to 5 years 

MUST be US Citizen to be eligible to apply for Federal Background Check 
Requires Real ID and or Valid Passport to interview 

SUMMARY
 
This System Administrator 3 (SA3) contract assignment will work with the Operational Monitoring, Analysis, and Process, Operational Services, Information Technology organization.
The SA3 in this assignment will perform systems analysis, interfacing with users to support functional requirements development, analysis of tools and techniques to support development, troubleshooting, analysis, performance monitoring, and improvement of systems used by the Operations functions. This assignment will provide Data Call response(s) and Cyber Vulnerability Assessment(s) (CVA). The CVA team consists of an assessor and a business systems analyst. This assignment will perform scanning in conjunction with the CVA assessor
 
POSITION RESPONSIBILITIES 
  • With Manager review and approval, perform the following:
    • Control Center Cyber Vulnerability Scanning:
      • Define, identify, and classify the security holes (vulnerabilities) in a computer, network, or communications infrastructure.
      • Interact with business units to discover, triage and resolve security vulnerabilities with manual and automated tools to enforce security criteria as part of a Secure Development Life Cycle on a continuous basis.
      • Research and investigate new and emerging vulnerabilities.
      • Analyze vulnerabilities in order to appropriately characterize threats and provide remediation recommendations.
      • Forecast the effectiveness of proposed countermeasures and evaluate their actual effectiveness after they are put into use.
      • Assist in Conducting vulnerability assessments (application and/or infrastructure) and articulate security issues to technical and non-technical audience. 
        • Conduct vulnerability assessments using tools such as NMAP, Nessus, or other related tools.  Alert the corporate manager of any concerns.
        • Operate and analyze results of open-source security tools and vulnerability scanners including Wireshark, ngrep, nmap, and Snort.
        • Analyze network and wireless traffic, and report to corporate management on abnormal activity
      • Compile vulnerability data from many sources and track technical resolution and mitigation times.
      • Report findings and maintain on-going assessments for regulatory reporting.
      • Alert the corporate manager and generate system vulnerabilities reports; interface and collaborate with internal groups to identify, discuss and develop remediation recommendations.
      • Present recommended remediation plans for corporate management / stakeholder review and approval.
      • Track and follow through to completion assigned remediation activities. Seek corporate manager guidance with prioritization questions or concerns.
      • Assist with vulnerability assessments including evaluation of specific configurations of network devices, operating systems, and network enabled software applications on both Windows and Linux platforms. Perform network discovery and comparison with known cyber assets.
    • Vulnerability Scanning:
      • Configure vulnerability assessment tools, as well as perform scans, research and analyze vulnerabilities, identify relevant threats, corrective action recommendations, summarize and report out results.
      • Identify critical flaws in applications and systems that cyber attackers could exploit.
      • Conduct vulnerability assessments for networks, applications and operating systems.
      • Use automated tools (e.g. Nessus) to pinpoint vulnerabilities and reduce time-consuming tasks.
      • Use manual testing techniques and methods to gain a better understanding of the environment to reduce false negatives
      • Develop, test and modify custom scripts and applications for vulnerability testing.
      • Manually validate report findings to reduce false positives.
      • Compile and track vulnerabilities over time for metrics purposes.
      • Write and present comprehensive Vulnerability Assessments on new systems.
      • Review and define requirements for information security solutions.
      • Supply hands-on training to network and system administrators of the vulnerability scanning program.
      • Develop and maintain a vulnerability assessment database.
      • Perform trend and analysis of vulnerability scan data.
      • Generate reports that identify security posture of the base (i. e. deficiencies, history of repeats, etc.).
      • Develop and draft Transmission Operations Standard Operating Procedures (SOPs), checklists, guides, best practices and procedures for conducting vulnerability assessments.
      • Automate procedures using scripts, SQL/database administration, or other available technology.
      • Report out on repeat high vulnerabilities to the communications unit monthly.
      • Maintain functionality of vulnerability management tools including configuration and maintenance of applications (e.g. Nessus, Tenable Security Center and other vulnerability assessment tools).
      • Perform information system security vulnerability scanning to discover and analyze vulnerabilities and characterize risks to networks, operating systems, applications, databases, and other information system components.
      • Perform compliance scanning to analyze configurations and facilitate implementation of configurations and hardening settings for networks, operating systems, applications, databases, and other information system components. Engage with stakeholders, to include IT professionals, management, and auditors, to facilitate vulnerability discovery and remediation.
      • Communicate security and compliance issues in an effective and appropriate manner to corporate management, customers and stakeholders. 
      • Recommend appropriate remedial actions to mitigate risks and verify information systems employ appropriate level of information security controls.
      • Analyze Vulnerability scan results and engage with customers in order to resolve identified vulnerabilities.
      • Validate remedial actions and verify compliance with information security policy and regulatory requirements.
      • Assist in development and implementation of information security vulnerability management policies, procedures, and standards based on National Institute of Standards and Technology (NIST) 800-53 standards, best practices, and compliance requirements.
  • Maintain filing system(s), files, emails and records in accordance with compliance requirements. File and disperse documents/letters only to appropriate personnel. Maintain all official records in accordance with the Information Security (INFOSEC) and Information Governance & Lifecycle Management (IGLM) standards and procedures. Validate official records are accurately maintained for auditing purposes 
Education & Corresponding Experience 
  • A degree in Computer Science, Information Technology, or a directly related technical discipline is preferred.
    • 8 years of experience is required with an applicable associate or bachelor’s degree.
  • 10 years of experience is required without an applicable degree or with no degree
  • Experience includes a minimum combination of work-related experience, on-the-job training, and/or vocational training. Experience should be consistent with the specific requirements of Computer/Information Technology or related field and progressively more technical in nature 
Required Skills & Experience  
  • 2 years’ experience with the following:
    • Classes of vulnerabilities, appropriate remediation, and industry standard classification schemes (CVE, CVSS, CPE)
    • Linux and Windows operating systems, including common programming or scripting languages
    • Devising methods to automate testing activities and streamline testing processes
  • Knowledge of patching programs of major hardware/software manufacturers. Knowledge of secure configuration and hardening of systems
  • Knowledge of methods for on-going evaluation of the effectiveness and applicability of information security controls (e.g., vulnerability testing, and assessment tools)
  • Knowledge of security vulnerabilities, application analysis, and protocol analysis
  • Knowledge of network topology, communication protocols, firewalls, proxies and IDS systems to effectively configure scanning software 
Preferred Skills & Experience  
  • Experience setting up and administering an enterprise cyber-vulnerability scanning and assessment infrastructure.
  • Experience administering computer systems in a 24/7 high availability operational environment. 
  • Experience using specific technologies such as Splunk
  • Experience administering Tenable.sc and Nessus 
Additional Requirements: 
  • Valid U.S. Driver’s License is required
 
Pre-Employment Requirement
All employment offers are contingent upon successful completion of our pre-employment screening that may include drug testing, background/criminal check, and if applicable, must meet eligibility requirements for access to classified information.
 
APR Staffing is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by law.
 
About APR Staffing
APR Staffing was born from the merger of two well-respected technical staffing firms in Portland. ieSolutions and Data Resource Group. Both companies have recently been award winners for the Portland Business Journal's Fastest-Growing Private Companies. The two firms, now as APR Staffing, make for one of the fastest-growing and most-respected professional and technical staffing companies in Oregon and Southwest Washington.
 
Collaborating with our customers, we augment their workforce with technical and administrative professionals. We provide only high-caliber, professional-grade resources throughout the Pacific Northwest.
 
 

Numbers & Facts

LocationVancouver, WA

Skills

  • Analysis Skillsunmatched
  • Applications Securityunmatched
  • Auditingunmatched
  • Background Investigationunmatched
  • Best Practicesunmatched
  • Business Solutionsunmatched
  • Communication Skillsunmatched
  • Communications Protocolsunmatched
  • Computer Networksunmatched
  • Computer Scienceunmatched
  • Computer Securityunmatched
  • Computer Systemsunmatched
  • Corporate Planningunmatched
  • Corrective Actionunmatched
  • Data Analysisunmatched
  • Data Collectionunmatched
  • Database Administrationunmatched
  • Develop Methodologiesunmatched
  • Driver's Licenseunmatched
  • Establish Prioritiesunmatched
  • Firewallsunmatched
  • Follow Throughunmatched
  • Forecastingunmatched
  • High Availabilityunmatched
  • Identify Issuesunmatched
  • Industry Standardsunmatched
  • Information Technology & Information Systemsunmatched
  • Information/Data Security (InfoSec)unmatched
  • Internet Securityunmatched
  • Intrusion Detection Systemsunmatched
  • Linux Operating Systemunmatched
  • Metricsunmatched
  • Microsoft Windows Operating Systemunmatched
  • NMapunmatched
  • Nessusunmatched
  • Network Administration/Managementunmatched
  • Network Configuration Managementunmatched
  • Network Performance/Analysisunmatched
  • Network Securityunmatched
  • Network Softwareunmatched
  • Network Systemsunmatched
  • Network Topologyunmatched
  • Network Traffic Analysisunmatched
  • Open Sourceunmatched
  • Operating Systemsunmatched
  • Operational Auditunmatched
  • Operations Processesunmatched
  • Performance Analysisunmatched
  • Performance Managementunmatched
  • Process Developmentunmatched
  • Product Lifecycleunmatched
  • Protocol Analysisunmatched
  • Quality Assurance Methodologyunmatched
  • Record Keepingunmatched
  • Regulatory Complianceunmatched
  • Regulatory Reportsunmatched
  • Regulatory Requirementsunmatched
  • Reporting Skillsunmatched
  • Requirements Managementunmatched
  • Risk Managementunmatched
  • SQL Databasesunmatched
  • Scripting (Scripting Languages)unmatched
  • Security Attacksunmatched
  • Security Complianceunmatched
  • Security Policyunmatched
  • Snortunmatched
  • Software Administrationunmatched
  • Software Configuration Managementunmatched
  • Software Patchesunmatched
  • Software Testingunmatched
  • Splunkunmatched
  • Systems Administration/Managementunmatched
  • Systems Analysisunmatched
  • Systems Maintenanceunmatched
  • Technical Recruitingunmatched
  • Test Automationunmatched
  • Test Plan/Scheduleunmatched
  • Test Toolsunmatched
  • Testingunmatched
  • Time Managementunmatched
  • Time Trackingunmatched
  • Trend Analysisunmatched
  • U.S. National Institute of Standards and Technology (NIST)unmatched
  • United States Citizenunmatched
  • Vulnerability Scannersunmatched
  • Willing to Travelunmatched
  • Wireless Communicationsunmatched
  • Wireshark (Ethereal)unmatched

Be found by employers

5,500+ employers search our resume database daily. Add yours to get found by recruiters looking for candidates like you.

Level up your application

Professional resume templates

Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

Free resume templates

Resume Builder

Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

Resume Builder