System Administrator-Vulnerability Analysis & Management

Location: Amarillo, TX - Pantex Plant

Job Title: System Administrator-Vulnerability Analysis & Management

Career Level From: Specialist

Career Level To: Specialist

Organization: VAM/Lifecycle )

Job Specialty: System Administration

Proactively evaluates and remediates risk related to vulnerability management compliance across a wide variety of technologies. Responsible for vulnerability detection and assessment, and driving vulnerability remediation. Interact daily with End-Users, System Administrators and Cyber Security to ensure vulnerable devices are brought into compliance. Develops and recommends corrective actions for vulnerabilities that cannot be immediately remediated.

• Analyze vulnerability scans and help set prioritization for remediation
• Evaluate identified vulnerabilities and determine applicability/risk to our environment
• Develop mitigations to reduce the vulnerability risk when it cannot be remediated within the established timeframe
• Document vulnerability analysis findings and make recommendations for risk acceptance when necessary
• Remediate high-density vulnerable systems
• Remediate systems with Critical, High and Medium vulnerabilities within prescribed time frames
• Create, as needed, advanced Power Shell scripts to remediate systems with vulnerabilities
• Manage the end‑to‑end vulnerability lifecycle from discovery to closure
• Install, configure and maintain vulnerability scanning tools
• Implement processes, capabilities and techniques for vulnerability management and remediation
• May require frequent inter‑organizational and outside customer contacts
• Performs system monitoring of accountable systems and contributes to optimum system availability.
• Develops and adapts new techniques to solve complex problems
• Develops and maintains current operational procedures and user documentation applicable to the supported systems
• Responsible for improving and communicating general system knowledge, skills and capabilities, and providing advanced technical consultation as required
• Accountable for all direct output assigned and for providing direct output support to his/her manager
• Responsible for maintaining a thorough knowledge of applicable Federal, State, Department of Energy (DOE), Corporate and Plant rules, regulations and Plant‑wide operating policies and procedures
• Performs other duties as assigned
• Required to attend and/or successfully complete training classes as determined by the Training and Development Technologies Department, through General Employee Training (Reference DOE Order 426.2), and Management
• Participates in worker involvement including input to work planning and methods to identify hazards and controls
• Understands a worker’s right to stop work when they feel their own or other’s personal safety is jeopardized
• Attends all required safety meetings and training. Offers suggestions on improvements to the work environment

• Meaningful work and unique opportunities to support missions vital to national and global security
• Top‑notch, dedicated colleagues
• Generous pay and benefits with a stable organization
• Career advancement and professional development programs
• Work‑life balance fostered through flexible work options and wellness initiatives

• Not Applicable

• Bachelor’s degree in engineering/science discipline with a minimum 4 years of relevant experience.
• OR a Master’s degree in engineering/science discipline with a minimum 2 years of relevant experience
• OR applicants without a bachelor’s degree may be considered based on a combination of at least 12 years of completed education and/or relevant experience

• Strong understanding of vulnerability scanning systems (Nessus, Tenable Security Center, etc) preferable
• Strong understanding of the current Microsoft Windows Operating Systems (OS) (server and desktop OS’s)
• Strong understanding of patch management systems (System Center Configuration Manager (SCCM), Windows Server Update Services (WSUS), Puppet, Ansible, etc.)
• Experience with virtual computing environments, including desktops and servers preferred
• Strong…