NIH - Infrastructure Scanning Analyst

<span style="font-size:11pt;"><span style="line-height:normal;"><span style="font-family:'Times New Roman', serif;"><span style="font-size:10pt;">cFocus Software seeks a Infrastructure Scanning Analyst to join our program supporting the National Institutes of Health (NIH). This position is fully remote. This position requires a Public Trust or the ability to obtain a public trust clearance.</span></span></span></span><br><span style="font-size:11pt;"><span style="line-height:normal;"><span style="font-family:'Times New Roman', serif;"><b><span style="font-size:10pt;">Qualifications:</span></b></span></span></span><ul><li style="margin-left:8px;"><span style="font-size:11pt;"><span style="line-height:107%;"><span style="font-family:'Times New Roman', serif;"><span style="font-size:10pt;"><span style="line-height:107%;">Public Trust Clearance</span></span></span></span></span></li><li style="margin-left:8px;"><span style="font-size:11pt;"><span style="line-height:normal;"><span><span style="font-family:'Times New Roman', serif;"><span style="font-size:10pt;">B.S. Computer Science, Information Technology, or a related field</span></span></span></span></span></li><li style="margin-left:8px;"><span style="font-size:11pt;"><span style="line-height:normal;"><span><span style="font-family:'Times New Roman', serif;"><span style="font-size:10pt;">5+ years of experience performing enterprise vulnerability assessments.</span></span></span></span></span></li><li style="margin-left:8px;"><span style="font-size:11pt;"><span style="line-height:normal;"><span><span style="font-family:'Times New Roman', serif;"><span style="font-size:10pt;">Experience operating enterprise vulnerability scanning platforms.</span></span></span></span></span></li><li style="margin-left:8px;"><span style="font-size:11pt;"><span style="line-height:normal;"><span><span style="font-family:'Times New Roman', serif;"><span style="font-size:10pt;">Experience performing credentialed host and network vulnerability assessments.</span></span></span></span></span></li><li style="margin-left:8px;"><span style="font-size:11pt;"><span style="line-height:normal;"><span><span style="font-family:'Times New Roman', serif;"><span style="font-size:10pt;">Experience supporting Federal cybersecurity programs or large enterprise environments.</span></span></span></span></span></li><li style="margin-left:8px;"><span style="font-size:11pt;"><span style="line-height:normal;"><span><span style="font-family:'Times New Roman', serif;"><span style="font-size:10pt;">Experience interpreting vulnerability data and developing remediation guidance.</span></span></span></span></span></li></ul><br><span style="font-size:11pt;"><span style="line-height:107%;"><span style="font-family:'Times New Roman', serif;"><b><span style="font-size:10pt;"><span style="line-height:107%;">Duties:</span></span></b></span></span></span><ul><li style="margin-left:8px;"><span style="font-size:11pt;"><span><span style="line-height:107%;"><span style="font-family:'Times New Roman', serif;"><span style="font-size:10pt;"><span style="line-height:107%;"><span style="color:#030303;">Perform credentialed host, network, application, and database vulnerability scans across NIH/OD-managed systems. </span></span></span></span></span></span></span></li><li style="margin-left:8px;"><span style="font-size:11pt;"><span><span style="line-height:107%;"><span style="font-family:'Times New Roman', serif;"><span style="font-size:10pt;"><span style="line-height:107%;"><span style="color:#030303;">Schedule and execute recurring vulnerability assessments in accordance with Government-defined scanning frequencies. </span></span></span></span></span></span></span></li><li style="margin-left:8px;"><span style="font-size:11pt;"><span><span style="line-height:107%;"><span style="font-family:'Times New Roman', serif;"><span style="font-size:10pt;"><span style="line-height:107%;"><span style="color:#030303;">Perform specialized vulnerability assessments for High Value Assets (HVAs) and other designated systems. </span></span></span></span></span></span></span></li><li style="margin-left:8px;"><span style="font-size:11pt;"><span><span style="line-height:107%;"><span style="font-family:'Times New Roman', serif;"><span style="font-size:10pt;"><span style="line-height:107%;"><span style="color:#030303;">Validate scan coverage to ensure all approved assets are included within the enterprise vulnerability management program. </span></span></span></span></span></span></span></li><li style="margin-left:8px;"><span style="font-size:11pt;"><span><span style="line-height:107%;"><span style="font-family:'Times New Roman', serif;"><span style="font-size:10pt;"><span style="line-height:107%;"><span style="color:#030303;">Maintain scan schedules while minimizing operational impact. </span></span></span></span></span></span></span></li><li style="margin-left:8px;"><span style="font-size:11pt;"><span><span style="line-height:107%;"><span style="font-family:'Times New Roman', serif;"><span style="font-size:10pt;"><span style="line-height:107%;"><span style="color:#030303;">Operate, administer, and maintain the NIH/OD vulnerability scanning infrastructure.</span></span></span></span></span></span></span></li><li style="margin-left:8px;"><span style="font-size:11pt;"><span><span style="line-height:107%;"><span style="font-family:'Times New Roman', serif;"><span style="font-size:10pt;"><span style="line-height:107%;"><span style="color:#030303;">Configure, optimize, and maintain enterprise vulnerability scanning tools and supporting services.</span></span></span></span></span></span></span></li><li style="margin-left:8px;"><span style="font-size:11pt;"><span><span style="line-height:107%;"><span style="font-family:'Times New Roman', serif;"><span style="font-size:10pt;"><span style="line-height:107%;"><span style="color:#030303;">Ensure scanning infrastructure provides comprehensive enterprise visibility and situational awareness.</span></span></span></span></span></span></span></li><li style="margin-left:8px;"><span style="font-size:11pt;"><span><span style="line-height:107%;"><span style="font-family:'Times New Roman', serif;"><span style="font-size:10pt;"><span style="line-height:107%;"><span style="color:#030303;">Support integration between NIH/OD vulnerability management tools and existing enterprise vulnerability management capabilities.</span></span></span></span></span></span></span></li><li style="margin-left:8px;"><span style="font-size:11pt;"><span><span style="line-height:107%;"><span style="font-family:'Times New Roman', serif;"><span style="font-size:10pt;"><span style="line-height:107%;"><span style="color:#030303;">Maintain operational readiness of vulnerability scanning platforms.</span></span></span></span></span></span></span></li></ul>