CCS Global Tech is a rapidly growing Information Technology company with a diverse portfolio of technology products and services and a large network of industry partnerships. With over 22 years of being a successful business with a global talent pool and presence, CCS is a certified Microsoft Gold Partner and specializes in delivering expert Microsoft based solutions for technical and business needs. We have been recognized by Inc. 500 Magazine as one of the fastest growing small companies in the Unites States.

we are a Tier 1 vendor for the City and County of San Francisco for Cloud Services, Staffing Services and Training Services. For this multi-year opportunity with a diverse set of needs to address, we are currently focusing on establishing partnerships with individuals as well as companies who can help us enhance our overall service portfolio, cut lead times, and ultimately help us deliver successfully. We currently hold sizable Government accounts in the San Francisco bay area including City and County of San Francisco, San Mateo County, and Santa Clara County.

We take great pride in our global reach and local influence. Your experience alongside our highly skilled and talented internal team who guide you along the way, offers key insights into what helps you stand out in a competitive job market.

If you are a partner company, please submit resumes with contact information of your own W2 Consultants only. Submitted consultants are expected to have excellent communication skills.

Vulnerability Assessment Analyst Junior
CBP BI - High Trust
Washington DC
$120,000

Years of Experience - 4+ years

Job Description -
The Contractor shall provide Vulnerability Assessment (VA) support to CBP information systems, including but not limited to the following:
Assist the Government in managing CBP Enterprise Information System Vulnerability Management (ISVM) compliance validation.
Assist the Government in briefing leadership on current and future vulnerabilities, security policies and industry standards.
Assist the Government in briefing leadership on most impactful vulnerabilities, configurations, and penetration testing efforts.
Assist the Government in creating and managing all scans in accordance with the CBP VAT scan standardization documentation.
Assist the Government in performing regularly scheduled vulnerability assessments using a master schedule as directed.
Assist the Government in managing, customizing, and maintaining scan policies, zones, and repositories as they relate to the CBP network.
Assist the Government in performing scan functions and review scan results to ensure accurate findings.
Assist the Government in creating and customizing scan reports and data feeds to be imported / integrated into third party assessment tools.
Support the coordination of the VA scanning and testing in advance with the system ISSO and the Government Task Monitor (TM) to assure coordination with network maintenance, availability, and operations.
Coordinate with system owner / ISSM/ ISSO to make any necessary changes to the schedule.
Use test procedures approved by the Government VAT Team Lead, including scripts to collect information and VA tools that are Security Content Automation Protocol (SCAP) compatible; the latest versions of tools with up-to-date lists of vulnerability checks in accordance with CBP's policies, needs, and technologies.
Assist the Government in conducting specialized VA testing to include Database and Web application assessments, penetration testing, mobile application assessments, 802.11 wireless assessments, and radio frequency testing and analysis of frequencies in common usage by IOT devices (approximately 300MHz to 6GHz).
Assist the Government in employing ad hoc or emergency VA scanning to support targeted incident investigation, escalation, and emergency response to security events in accordance with documented procedures.
Support internal and external audits, including but not limited to OIG, NCATS, CSP, KPMG, etc.
Provide support to facilitate Bug Bounty assessments performed by contracted vendors on CBP Information Systems.
Assist the Government in managing / maintaining asset inventory for each FISMA system, database, and web application Uniform Resource Identifiers (URLs) as provided by each system ISSO.
Assist the Government in providing support to ISSO / ISSM interpreting scan results and recommend remediation plans.
Assist the Government in performing enumeration for data calls, including but not limited to CISA Binding Operational Directives (BOD) and Emergency Directives (ED).
Travel to be physically on location to perform onsite security assessments of CBP facilities, systems, and applications as requested.

Vulnerability Assessment Analyst Junior

Key skills

About this role