Theater Vulnerability Analyst

@ Clearwaters.IT

Theater Vulnerability Analyst Position

Location: Honolulu, HI (with up to 40% travel to PACAF locations). Candidates must reside within commuting distance.

This role supports Pacific Air Forces (PACAF) cybersecurity operations across its Area of Responsibility. It involves vulnerability data analysis, remediation guidance, secure configurations maintenance, and security posture reporting to PACAF leadership.

Key Responsibilities

• Analyze PACAF cybersecurity posture reports and identify improvements.
• Provide expert remediation guidance to PACAF cyber units.
• Oversee ACAS vulnerability scanning and SCCM/MECM patching processes.
• Maintain and assess DoD-mandated endpoint security tools.
• Coordinate and deliver vulnerability management training at PACAF bases.
• Develop and maintain documentation and procedures for vulnerability management.
• Track and report POAMs until resolution.
• Produce metrics and weighted scores for NIPRNet and SIPRNet.
• Utilize CORA reports to assess risk and advise cybersecurity staff.
• Prepare and brief command-wide cybersecurity statuses for leadership.
• Maintain asset lists to ensure 100% coverage.
• Manage tool accounts for patching and vulnerability analysis.
• Stay current with directives impacting vulnerability management.
• Support compliance with contract-related reporting and documentation.

Qualifications & Experience

• Active Top Secret/SCI clearance required.
• DoD 8140/8570 certification at IAT Level 3 (e.g., CISSP, CASP+, CISA, CySA+, CISM).
• 3–4 years experience in network vulnerability engineering and remediation.
• Strong knowledge of PACAF cyber architecture and related tools.
• Experience with DISA STIGs and endpoint security products.
• Proficiency in Microsoft Office Suite, SharePoint, and collaboration tools (MS Teams, VoIP, VTC).
• Ability to clearly brief senior leaders and communicate with varied audiences.
• Willingness to travel up to 40% across the PACAF AOR.

Preferred Experience & Benefits

• Familiarity with HBSS, Trellix, and Microsoft Defender for Endpoint.
• Understanding of USAF vulnerability management directives and frameworks (e.g., MITRE ATT&CK, NIST CSF).
• Experience in compliance inspections and command-level cybersecurity strategy.

Benefits include: Health Care Plan (Medical, Dental & Vision), Retirement Plan (401k, IRA), Life Insurance, and Paid Time Off.

Key skills/competency

• Cybersecurity
• Vulnerability Management
• ACAS
• SCCM/MECM
• Patch Management
• DoD Compliance
• Risk Analysis
• Endpoint Security
• Training
• Reporting