{"id":2430137,"url":"https://alion.io/job/nakupuna-cyber-defense-vulnerability-operations-analyst","title":"Cyber Defense & Vulnerability Operations Analyst","company":{"id":4423049,"name":"Nakupuna Companies","domain":"nakupuna.com","url":"https://alion.io/company/nakupuna","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Charleston, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":75000,"max_usd":143000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":502},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Linux","optional":false},{"name":"Nessus","optional":false},{"name":"Oracle","optional":false},{"name":"SAP HANA","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Windows Server","optional":false}],"status":"live","first_seen_at":"2026-10-13T08:43:53Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-28T19:42:57Z","board_verified":true,"closed_at":null,"days_open":15,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":15},"description":"Overview\nThe Cyber Defense & Vulnerability Operations Analyst supports Navy ERP through continuous security monitoring, alert analysis, and enterprise vulnerability management. This role investigates and responds to indicators of compromise across databases, operating systems, and middleware. The specialist oversees required scanning, tracks compliance, and submits data to DoD repositories, including VRAM and CMRS. They also lead remediation meetings with database, application, and infrastructure subject matter experts to address identified vulnerabilities.\nResponsibilities\nThe following reflects management’s definition of essential functions for this job but does not restrict the tasks that may be assigned.\nSecurity Operations & Alert Monitoring:Monitor real-time security alerts from Splunk, Tripwire, and HBSS in accordance with SOPs.\nTriage, analyze, and escalate suspicious events, anomalous behaviors, and security incidents.\nConduct deep-dive activity monitoring across core Navy ERP architecture:Databases: SAP HANA, Oracle, and Sybase.\nOperating Systems: Windows Server and Linux host activities.\nApplications & Middleware: Tripwire, webMethods, IBM Tivoli, and integration layers.\n\nSIEM Content & Correlation Rule Engineering:Develop, refine, and optimize correlation searches within Splunk Enterprise Security.\nTune detection logic to eliminate false positives and enhance detection fidelity.\nDesign custom Splunk dashboards, scheduled alerts, and compliance tracking metrics.\nDefine data requirements and logging standards for new inbound data sources.\n\n Vulnerability Scanning & Asset Coverage:Schedule, execute, and validate weekly and ad-hoc ACAS (Tenable) vulnerability scans.\nSchedule, execute, and review weekly and ad-hoc Onapsis scans across SAP instances.\nEnsure 100% of Navy ERP assets receive required policy scans.\nMonitor HBSS/ESS agent coverage across all endpoints; coordinate with NAWC-AD data center HBSS admins.\n\nCompliance Reporting & DoD Systems of Record:Export verified ACAS scan results and upload directly into VRAM.\nConsolidate vulnerability data and HBSS status metrics for regular submission into CMRS.\nGenerate and distribute detailed vulnerability assessment reports to technical SMEs.\n\nCross-Team Collaboration & Stakeholder Reviews:Lead or back up weekly vulnerability review meetings with system, database, and platform SMEs.\nTrack remediation milestones and validate post-remediation re-scans.\n\nDocumentation & Governance:Maintain and update threat response playbooks, scanning schedules, and operational SOPs.\n\nQualifications\nRequired Qualifications\nExperience: 4+ years in SOC analysis, cyber defense, or vulnerability assessment within DoD/Navy environments.\n SIEM Proficiency: Advanced knowledge of Splunk (SPL query language, Enterprise Security, correlation searches, alerting).\n Vulnerability & Endpoint Tooling: Hands-on operational experience with:Tenable ACAS (Nessus and SecurityCenter).\nDoD HBSS/ESS (Trellix ePO, agent verification, module status).\n\nCompliance Systems: Direct experience uploading and tracking vulnerability data in VRAM and CMRS.\n Technical Breadth: Foundational understanding of enterprise databases (SAP HANA, Oracle) and OS security.\n Certifications:DoD 8570/8140 CSSP Analyst or IAT II/III baseline (e.g., CySA+, CEH, CASP+ CE, CISSP).\n\nPreferred Qualifications\nSplunk Certified Cybersecurity Defense Analyst or Splunk Core Certified Advanced Power User.\nDISA HBSS 201/301 Administrator training or Tenable ACAS certification.\nPrior experience coordinating with NAWC-AD or Navy program office cyber teams.\nPhysical Requirements: The ideal candidate must at a minimum be able to meet the following physical requirements of the job with or without a reasonable accommodation:\nAbility to perform repetitive motions with the hands, wrists, and fingers. \nAbility to engage in and follow audible communications in emergency situations. \nAbility to sit for prolonged periods at a desk and working on a computer.","description_format":"text","description_chars":3994,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","C4ISR","Penetration Testing"],"lifecycle":[{"event":"open","at":"2026-10-13T08:43:53Z"}],"visa":[],"liveness":{"score":18,"band":"cold","label":"Long shot","p_open":1,"p_active":0.516,"p_room":0.35,"age_days":14,"expected_fill_days":5,"reasons":["conf:4","velocity","win:tail"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/nakupuna-cyber-defense-vulnerability-operations-analyst","json_url":"https://alion.io/job/nakupuna-cyber-defense-vulnerability-operations-analyst.json","meta":{"generated_at":"2026-10-28T23:49:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":32718,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4423049},"rest":"https://alion.io/mcp/rest/get_company?id=4423049"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnakupuna-cyber-defense-vulnerability-operations-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnakupuna-cyber-defense-vulnerability-operations-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnakupuna-cyber-defense-vulnerability-operations-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nakupuna-cyber-defense-vulnerability-operations-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnakupuna-cyber-defense-vulnerability-operations-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2430137}},{"tool":"search_jobs","arguments":{"company":"nakupuna.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2430137},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}