ALL CANDIDATES MUST HAVE AN ACTIVE TS/SCI WITH A POLYGRAPH CLEARANCE! Description: Maintain knowledge of applicable policies, regulations, and compliance documents. Perform vulnerability assessments. Perform risk assessments. Conduct authorized penetration testing of IS network assets. Analyze site policies and configurations and evaluate compliance with regulations and IS directives/instructions. Prepare audit reports that identify technical and procedural findings and provide recommended remediation strategies/solutions. Maintain deployable audit toolkit (e.g. specialized software/hardware) to support audit missions. Qualifications: Candidate must have sixteen (16) years of experience that can be a combination of work history and education. This equates to a Doctorate and eight (8) years of experience OR Masters and ten (10) years, Bachelors and twelve (12) years, Associates and fourteen (14) years or HS and sixteen (16) years.