Cybersecurity Exploitation Specialist
Summary
A Cybersecurity Exploitation Specialist supporting the Department of State's Diplomatic Technology IM division: reviews and tracks Microsoft Azure cloud security vulnerabilities, produces customer-specific security reports and executive dashboards, automates vulnerability reporting, and manages remediation tracking via a SharePoint solution and POA&M mapping. Requires a security clearance.
- Support security management operations by reviewing, analyzing, reporting, and tracking cloud service security vulnerabilities across DT/EI/IM environments.
- Serve as a member of the IM Security Management Team, providing subscription-level security assessments and mitigation recommendations for Microsoft Azure cloud environments.
- Develop and deliver detailed Department of State (DOS) customer-specific security reports to enable data-driven decision-making and communication between leadership and stakeholders.
- Analyze security findings and collaborate with DOS customers to enhance cloud security posture, mitigate risks, and improve compliance across development and production environments.
- Design and automate security reporting and vulnerability management processes to improve efficiency, accuracy, and visibility of remediation efforts.
- Develop and maintain a SharePoint-based remediation tracking solution to monitor subscription-level security vulnerabilities and corrective actions.
- Track and manage security findings across Azure subscriptions, ensuring timely remediation and accountability for risk mitigation activities.
- Map subscription-level vulnerabilities and exploits to existing System Plans of Action and Milestones (POA&Ms) to ensure accurate documentation, risk tracking, and compliance reporting.
- Create executive-level dashboards and reports that provide visibility into cloud security trends, remediation status, and overall risk posture.
- Partner with technical teams, security stakeholders, and leadership to drive continuous improvement of cloud security monitoring, reporting, and vulnerability management processes.
- Cyber Security
- Cyber Cloud: Foundation
- Cyber Metrics & Reporting: Foundation
- Security & Compliance: Foundation
- Cloud Computing: Foundation
- Stakeholder Management: Foundation