OVA Tool Analyst

Job content

• Experience in the COMPUSEC Vulnerability Assessment area, particularly in the interpretation of the results of CIS Technical Security Vulnerability Assessments
• Experience with Cyber Hygiene and the top 18 Critical Security Controls for effective cyber defence.
• Comprehensive knowledge of the principles of computer and communication security, networking, and the vulnerabilities of modern operating systems and applications.
• Experience in the implementation and integration of CIS Security protective measures.
• Knowledge of risk based Security Assessment of systems and networks.
• Practical hands-on experience in system and network administration.
• Demonstrable expert knowledge of Tenable Security Center and Tenable Nessus products
• Ability to investigate and analyse complex scenarios and solve problems in innovative ways
• Excellent communication abilities, both written and verbal, with the ability to clearly and successfully articulate complex issues to a variety of audiences and teams
• National of one of the 30 NATO countries
• In possession of an active National and/or NATO Cosmic Top Secret security clearance
  

• Tenable Certified Nessus User, or Tenable Certified Nessus Auditor certifications
• Holding recognized professional qualification within the Vulnerability Auditing field of expertise e.g. SANS AUD507
• A solid understanding of Information Security Practices; relating to the Confidentiality, Integrity and Availability of information (CIA triad.)
• Prior experience of working in an international environment comprising both military and civilian elements
  

• Install, deploy, update, monitor, maintain, configure, troubleshoot and keep in operational conditions the Online Vulnerability Assessment (VA) systems: vulnerability scanners, vulnerability management and reporting solutions.
• Define, maintain, update advanced VA configurations, e.g. low performance impact VA scans, and audit files that implement specific hardening guides.
• Perform Online Vulnerability Assessments of remote networks and interfaces on classified and unclassified networks, systems and applications.
• Support NCI Agency customers in the process of vulnerabilities remediation.
• Develop dashboards and reports that reflect vulnerability management program effectiveness and efficiency and the Online VA systems availability and scans performance; perform targeted historical analysis; review historical trending data and recommend improvement opportunities; produce metrics to be integrated into wider NCI Agency products that are being delivered up to NATO executive management level.
• Compile, draft, review and deliver inputs on all aspects relevant to vulnerability data collection, vulnerability data analysis and reporting processes to ensure consistency with NATO policies and NCI Agency directives, and acts as technical expert for the VA tools.
• Develop the NCI Agency specific Request for Change formal documentation, configure the test of the VA systems and provide support for conducting functional and security tests required by the Change Management processes for having the systems approved to be used on NCI Agency managed networks.
• Maintain awareness of new technologies and developments, industry standards and best practices and threat intelligence within the wider IA community.
• Provide required support for the selection of security tools