Vulnerability Scan Administrator
Assist in identifying and implementing security controls, performing risk assessments, and developing artifacts to obtain Authority to Operate (ATO) as part of the Risk Management Framework (RMF). Candidate will also perform duties in support of cybersecurity initiatives, such as, Independent Research and Development (IR&D), and operating cybersecurity testing environment
Responsibilities
- Continuous upkeep, monitoring, analysis, and response to Information System, network and security events.
- Work with eMASS to manage Cyber Tasking Orders (CTO) and ATO requirements
- Contribute to the preparation and maintenance of the Risk Management Framework (RMF) package and other accreditation support documentation.
- Maintaining the NIPR and SIPR RMF packages for all enclaves within scope of the contract.
- Administer and operate enterprise vulnerability scanning tools, covering scan configuration, scheduling, execution, and results validation.
- Support application and code security scanning workflows, assisting teams in identifying, prioritizing, and remediating security findings.
- Participates in internal/external security audits/inspections; performs risk assessments and Continuous Monitoring.
- Ensure proper protection and / or corrective measures have been taken when an incident or vulnerability has been discovered.
Requirements
- DoD security clearance – Secret level
- Foundational knowledge of the Risk Management Framework (RMF) and an understanding of DoD/DoN cybersecurity directives.
- Familiarity with vulnerability scanning tools and patch management.
- Basic understanding of OS hardening, networking concepts, and system security engineering principles.
- Strong organizational skills with the ability to contribute to clear technical documentation, procedures, and reports.
- Excellent teamwork and communication skills with the ability to effectively support a lead engineer in a government contracting environment.Active Secret Clearance (must be able to obtain and maintain).
- Six or more years of experience
Skills Required
- Active Secret Clearance (must be able to obtain and maintain)
- Six or more years supporting cybersecurity operations, vulnerability scanning, and enterprise system/network administration
- Administer and operate ACAS
- Administer and operate Netsparker
- Support application and code security scanning using Checkmarx
- Maintain and troubleshoot HBSS/ESS and Ivanti Endpoint Security
- Administer and troubleshoot Microsoft Server, Microsoft Workstation, and Linux environments
- Support credentialed scanning and enterprise identity dependencies using Active Directory and LDAP
- Configure and troubleshoot DNS, DHCP, IPv4/IPv6, VPN, and SSL/TLS
- Manage certificates and authentication using Microsoft Certificate Services and ActivIdentity ActivClient
- Monitor infrastructure health using SolarWinds and System Center Operations Manager (SCOM)
- Support configuration management and patch readiness using SCCM and System Center tools
- Produce reports and documentation using Microsoft Office (Visio, Project); collaborate via SharePoint and Skype/Teams
- Perform secure administration and file transfers using PuTTY, SFTP, and FTP
What We Do
G2IT, LLC is a Woman Owned Small Business (WOSB) and an Economically Disadvantaged Woman-Owned Small Business (EDWOSB) headquartered in Annapolis, Maryland. As a value-added reseller (VAR) and BMC partner, G2IT LLC. provides comprehensive information technology and systems engineering solutions that are secure, state of the art and aligned with your organization’s needs. Through G2IT’s partnerships with leading technology vendors we deliver best-in-class products and services supported by one of the most experienced professional services team in the industry. Our solutions ensures your investment in technology provides maximum performance, with minimum complexity and cost. G2IT supports all levels of the Public Sector, from the Department of Defense and Civilian agencies to State and Local government and higher education providing cost effective solutions for managing an organizations information, datacenters, and endpoints. G2IT has especially strong experience helping DoD clients address the specific challenges they face in a resource constrained environment
