Title: Threat Management Analyst
State Role Title: Info Technology Specialist II
Hiring Range: $80,000 - $100,000
Pay Band: 5
Agency: VA Information Tech Agency
Location: VA Information Technologies
Agency Website: https://www.vita.virginia.gov/
Recruitment Type: General Public - G
Job Duties
The Virginia Information Technologies Agency (VITA) is excited to offer a competitive opportunity to serve as a Threat Management Analyst with the Commonwealth Security and Risk Management Division.
The Threat Management Analyst will participate in all areas of the Threat Intel and Vulnerability Management Team. These include web application scanning, vulnerability management and threat intelligence.
The analyst will function as a liaison between both internal and external customers. They will be translating highly technical information into terms that anyone can understand. They will use this skill to develop advisories on newly identified critical and/or zero-day vulnerabilities and emerging threats identified that impact COV systems and data.
The analyst shall recommend best practices, security enhancements and notify management of on-going vulnerabilities and emerging threats. The analyst will also participate in the configuration and maintenance of the tools used by the Theat Intel and Vulnerability Management Team.
Join VITA at The Boulders in Richmond, VA, where innovation meets impact! As the Commonwealth’s leading IT agency, we’re connecting, protecting, innovating, and powering Virginia’s digital future through collaboration, creativity, and purpose. Our team thrives in a vibrant, customer-focused environment that values growth, accountability, and forward thinking — all while making technology work for every corner of Virginia.
Minimum Qualifications
Considerable experience/knowledge in the identification, evaluation and presentation of web application or system vulnerabilities.
Considerable experience/knowledge in one or more of the following: Enterprise Helpdesk, System administration (Windows and Linux), TCP/IP networking, network administration, web server administration, web app development, Security Operations Center (SOC), vulnerability management.
Considerable experience/knowledge with common web application security scanning and analysis tools such as: Acunetix, Burp Suite, Fiddler, NMAP, SQL Map, OWASP ZAP, GreenBone or Nessus.
Considerable experience with Microsoft Office productivity products (Excel, Word, PowerPoint, Outlook, Teams).
Experience in meeting deadlines.
Experience working with internal/external stakeholders.
Experience with interpretation and application of federal, state laws/regulations/standards/policies.
Additional Considerations
Experience/knowledge using scripting language such as python, bash.
Experience with containerization platforms (Docker/Portainer/K8/OpenShift/Podman/etc.).
Experience with version control software (git*/github/gitlab/etc.).
Experience with EMC’s Archer GRC helpful.
Experience with or working knowledge of WAF technologies.
Special Instructions
You will be provided a confirmation of receipt when your application and/or résumé is submitted successfully. Please refer to “Your Application” in your account to check the status of your application for this position.
This position is eligible for one (1) day telework.
Applicants must consent to a fingerprint background check.
The Commonwealth of Virginia welcomes all applicants authorized to work in the United States. Sponsorship is not provided; therefore, applicants must be a citizen or national of the U.S., a Lawful Permanent Resident, or an alien authorized to work.
State applications and/or resumes will only be accepted as submitted online by 11:55 p.m. on the closing date through the state applicant tracking system. We will not accept applications, resumes, cover letters, etc. in any other format. Please refer to “Your Application” in your PageUp account to check the status of your application for this position. The decision to interview an applicant is based on the information provided in the application and/or resume.
Reasonable accommodations are available to persons with disabilities during the application and/or interview processes per the Americans with Disabilities Act.
VITA is a “Virginia Values Veterans” (V3) official certified state agency that provides hiring preference to Veterans and Members of the Virginia National Guard in support of Executive Order 29, (2010). If you are a Veteran or Virginia National Guard Member, we encourage you to apply and receive preference in the hiring process. AmeriCorps, Peace Corps and other national service alumni also are encouraged to apply.
Contact Information
Name: VITA Human Resources
Phone: Recruitment@vita.virginia.gov
Email: Recruitment@vita.virginia.gov
In support of the Commonwealth’s commitment to inclusion, we are encouraging individuals with disabilities to apply through the Commonwealth Alternative Hiring Process. To be considered for this opportunity, applicants will need to provide their AHP Letter (formerly COD) provided by the Department for Aging & Rehabilitative Services (DARS), or the Department for the Blind & Vision Impaired (DBVI). Service-Connected Veterans are encouraged to answer Veteran status questions and submit their disability documentation, if applicable, to DARS/DBVI to get their AHP Letter. Requesting an AHP Letter can be found at AHP Letter or by calling DARS at 800-552-5019.
Note: Applicants who received a Certificate of Disability from DARS or DBVI dated between April 1, 2022- February 29, 2024, can still use that COD as applicable documentation for the Alternative Hiring Process.