Vulnerability Risk Analyst

Electric Boat Information Technology (EB IT) is responsible for Electric Boat's enterprise and special use information systems, such as product design environments, collaboration platforms, and office productivity suites. EB IT supports over 20,000 end-users in a wide variety of work environments, networks and locations. Electric Boat Information Technology is pursuing an Infrastructure Support Engineer/Analyst to support a multi-year strategy to modernize the company's IT infrastructure within a robust cybersecurity environment.

Candidates can expect to perform project oversight activities as well as privilege access work. Candidates will need to be familiar with Microsoft products, ServiceNow Security Operations (SecOps), Tenable, and Nessus Manager. A successful candidate will work with a joint team of EB IT, Cybersecurity, and Customer Support Center personnel to implement, remediate, monitor, and improve Electric Boat's IT systems.

Position Summary:

An EB IT Vulnerability Risk Analyst will apply IT knowledge and expertise in a demanding fast-paced construction environment, including but not limited to the following areas:

Analyze vulnerability scan data to identify high-risk assets and prioritize remediation using The Common Vulnerability Scoring System (CVSS) and Risk Scorecards
• Configure and administer the ServiceNow SecOps module, including integrations with Tenable
• Develop SecOps dashboards and automated workflows for vulnerability intake, remediation and tasking
• Collaborate with ServiceNow platform engineers to improve CMDB accuracy, and risk scoring models

Work closely with application owners and patch management groups to communicate vulnerability details and track remediation efforts

Required:

• Bachelor of Science degree in Computer Science
• 10+ years of IT service management and security operations experience
• Certified Information Systems Security Professional (CISSP)
• CompTIA Security+ & Network+

Preferred:

• Experience with Electric Boat's ServiceNow SecOps process and workflow creation
• Ability to present vulnerability score cards and findings to executives
• Effective communication
• Executive and Stakeholder management
• Risk analysis and critical decision making
• ServiceNow SecOps Implementation

• Dashboard creations
• Detailed understating of ServiceNow enhancements and Tenable feed
• Detailed understanding of Vulnerability Risk Management framework
• Understanding of the Tenable platform
• Understanding of Nessus platform