Senior Systems Security Analyst

Govcio LLC

4d•$145,000 - $170,000•Hybrid

About The Position

GovCIO is currently hiring for a Senior Systems Security Analyst with an active Secret clearance to evaluate actions needed to implement customer security policy by developing plans and implementing solutions. This position will be located in Arlington, VA, and will be a hybrid position.

Requirements

High School with 10+ years of security systems analysis (or commensurate experience)
Clearance Required: Active Secret with the ability to obtain and hold DEA suitability

Responsibilities

Responsible for evaluating actions needed to implement customer security policy by developing plans and implementing solutions such as patches, configuration, or GPO changes, and STIG settings to address security vulnerabilities and risks.
The candidate will play a lead role in ensuring the environment is patched and compliant, working with security, operations, and engineering teams to develop action plans to meet security requirements and to track and report patching and remediation progress.
Reviews security policies, directives, and vulnerability information to determine plans for addressing them.
Determines and/or works with others to determine technical solutions for remediating vulnerabilities within a large Enterprise.
Leads team to patch and deploy remediations/patches.
Tracks and reports on vulnerability remediation.
Manages team efforts to address remediations in alignment with customer security policies and timelines.
Utilizes the Qualys vulnerability scanning tool to review vulnerabilities in the environment and validate post-deployment vulnerability remediation.
Assists technical teams with the identification of baselines, scanning compliance, and performing remediation steps to bring systems into compliance.
Works with System ISSOs to develop POAMs, address audit findings, and provide other required information for security documentation and artifacts.
Provides technical recommendations to the remediation plan for identified events.
Ensures security tools are on all systems, including servers, laptops, and desktops, and works with systems administrators to install them if missing.