Job Description

Huntington Ingalls Industries – Technical Solutions Division (HII-TSD) is seeking a Security Automation Analyst to support National Institute of Standards and Technology (NIST). As a Security Automation Analyst, you will support the National Institute of Standards and Technology (NIST), specifically the National Vulnerability Database (NVD) and the National Checklist Program (NCP) by being a part of an analysis team analyzing software and hardware vulnerabilities. You will work on customer site, remotely, and/or out of the HII-TSD (formerly G2 Inc) HQ building located in Annapolis Junction.

Essential Job Responsibilities

• Analysis experience supporting the National Vulnerability Database (NVD) and the National Checklist Program (NCP).

• Has prior knowledge and experience with analyzing configuration settings, vulnerabilities, patches and applying standardized scoring models.

• Able to identify, interpret and extract applicable information from vendor and third-party advisories.

• An understanding of the Common Platform Enumeration (CPE) Naming, Matching, and Dictionary.

• Familiarity with Common Weakness Enumeration (CWE) to identify, evaluate, and select related CWEs as part of the analysis process.

• Detailed understanding and application of the information for applied scoring utilizing the Common Vulnerability Scoring System (CVSS).

• Be able to work independently and meet monthly projections.

• Strong analytical and problem-solving skills.

• Professional oral and written communication skills for frequent interaction with team members, managers, and clients.

Minimum Qualifications

0 years experience with Bachelors in related field; or High School Diploma or equivalent and 4 years relevant experience.

• Associates Degree, IT industry certification in a platform or applications or demonstrated work experience in vulnerability analysis. Or a Bachelor’s degree with at least 2 years specialized experience in vulnerability analysis, incident response, or vulnerability management.

• Due to the nature of the work we do at HII-TSD, all employees must be U.S. Citizens. No clearance is required for this position.

• Knowledge of software and hardware vulnerabilities.

• Knowledge of the National Vulnerability Database (NVD). The NVD is the U.S. government repository of standards based vulnerability management data represented using the Security Content Automation Protocol (SCAP). This data enables automation of vulnerability management, security measurement, and compliance. The NVD includes databases of security checklist references, security-related software flaws, misconfigurations, product names, and impact metrics.

Preferred Requirements

• Previous development experience working on NIST projects.

• Proven ability to work creatively and analytically in a problem-solving environment demonstrating teamwork, innovation and excellence.

• Build and maintain relationships with our team that is comprised of HII employees, subcontractors, and most importantly our NIST counterparts. Engage with teammates to establish credibility, solve problems, build consensus and achieve objectives.

• Self-motivated, decisive, with the ability to adapt to change and competing demands.

• Demonstrated communication skills; both written and oral with technical and non-technical staff.

• Flexible with proven ability to conform to shifting priorities, demands and timelines through analytical and problem-solving capabilities.

• Proven ability to learn, understand and apply new technologies.