InfoSec Vulnerability Assessment Analyst II

Overview

To provide 2nd Tier response to security vulnerability incidents . Ensure adherence to standard operating procedures for detecting, classifying and reporting vulnerabilities. This role will work closely with other vulnerability assessment team members to identify threats and vulnerabilities to the organization. Will partner with additional teams within Navy Federal Credit Union to protect the Navy Federal brand, data, and IT assets from cyber-based threats. Performs role under minimal supervision

Responsibilities

• Performing Ad-Hoc scanning
• Review false positives and provide feedback to vulnerability owner
• Review scheduled scans to assure that scans are successfully completed
• Create daily reports for briefing - (Daily scan results, third party finding)
• Perform IP/Subnet reconciliation with an oversight of Level 2-4
• Assist system owners/remediation team for remediation validation
• Perform other duties as assigned

• Bachelor's degree in computer sciences with major in cyber security, information security or machine learning/AI etc., and/or the equivalent combination of education, training, and experience
• Two to three years of hands-on experience with Vulnerability scan tools (e.g. Tenable, Qualys, etc.)
• Familiarity with Information security regulations/practices such as NIST, CIS, PCI and DoD
• Scripting and automation experience
• Knowledge of industry standards and frameworks, including NIST, PCI, ISO, OWASP, and COBIT
• Experience in NIST continuous monitoring and Continuous Diagnostics Mitigation process
• Knowledge in computer administration or Network administration
• Demonstrate problem solving, analytical and process development skills
• Must be a team player with a cooperative and energetic spirit with a willingness to learn
• Ability to work and communicate with all levels of Management and Staff
• Previous experience within the financial sector
• Experience with and knowledge of different threats to an organization
• Experience with ServiceNow and/or other IT Asset Management tools
• Knowledge of Navy Federal's functions, philosophy, operations and organizational objectives
• Excellent customer service skills and interaction

• Background training in penetration testing
• Experience with Web Application vulnerability scanning tools such as Burp Suite, Nmap, and Wireshark
• Familiarity with the Wiz Cloud Security Platform for securing cloud environments and applications
• At least one of the following certifications: CEH, OSCP, GSEC, Microsoft Certified Azure Fundamentals (or other Cloud Fundamentals certifications), CompTIA Network+, Security+, or other related Information Security certifications