Vulnerability Management & ACAS Administrator

• Join a premier technology firm specializing in innovative solutions.
• Be part of a collaborative, inclusive, and innovative work culture.
• Enjoy tremendous growth potential in a high-performing team environment.
• A robust benefits package:
  • Health, dental, and vision insurance
  • Life insurance
  • Short-and-long term disability
  • Paid time off (PTO)
  • 401k retirement plan with employer match
  • Annual Professional Development Reimbursement Program
  • And more!

• Serve as the primary technical lead and subject-matter expert for ACAS and Nessus vulnerability scanning across NIPRNet, SIPRNet and JWICS.
• Administer, operate, maintain and troubleshoot the ACAS/Nessus infrastructure, including:
  • scanners
  • scan configurations, schedules and policies
  • plugins and credentials
  • associated management components
• Keep ACAS scanning capability, asset coverage, scanner health and vulnerability-data quality up to standard across all supported environments.
• Plan, coordinate and run authenticated and unauthenticated scans that follow approved schedules, operational requirements and maintenance windows.
• Analyze and validate scan results. Identify false positives, duplicate findings and scan-quality issues, and assess the possible impact on systems and mission operations.
• Prioritize vulnerabilities by severity, operational impact, exploitability, asset criticality and remediation timelines.
• Work with system administrators, network engineers, endpoint-security staff and system owners to drive remediation and verify closure.
• Track vulnerabilities, remediation actions, exceptions and status in approved tracking systems.
• Build and maintain vulnerability-management metrics, dashboards, trend analysis and recurring reports for technical staff, program leadership and customer stakeholders.
• Find and fix coverage gaps, credentialed-scan failures, connectivity problems, scanner performance issues and asset-inventory discrepancies.
• Support Security Technical Implementation Guide (STIG) compliance by matching ACAS findings to hardening requirements and remediation actions.
• Write and maintain ACAS standard operating procedures, operating instructions, scan procedures, troubleshooting guides and knowledge articles.
• Coordinate ACAS maintenance, upgrades, configuration changes and technical support with infrastructure, network, endpoint and cybersecurity teams.
• Advise leadership and stakeholders on ACAS capabilities, vulnerability trends, remediation priorities and operational risk.

• 8+ years of relevant cybersecurity, vulnerability management, systems administration or information assurance experience.
• 7+ years of hands-on experience as an ACAS/Nessus subject-matter expert in a large enterprise or Department of War environment.
• Proven experience running ACAS/Nessus infrastructure, including:
• scanner deployment, configuration and health monitoring
• scan-policy administration and plugin management
• credentialed scanning
• troubleshooting and reporting
• Experience managing vulnerability scanning across multiple security domains, including NIPRNet, SIPRNet and JWICS or comparable enterprise environments.
• Experience analyzing findings, validating scan results, identifying false positives, prioritizing remediation and verifying closure.
• Experience developing vulnerability-management reports, metrics, dashboards and leadership-level status products.
• Experience coordinating remediation with system administrators, network teams, endpoint-security teams and system owners.
• Working knowledge of Microsoft Windows, Linux, virtualization, networking concepts and enterprise endpoint environments.
• Working knowledge of:
  • STIG compliance
  • SCAP Compliance Checker (SCC) and STIG Viewer
  • secure configuration baselines and security hardening
• Strong written, verbal, organizational, analytical and problem-solving skills.
• Able to work independently as the program's primary ACAS technical lead while coordinating well with cross-functional technical teams.

• An active DoD 8140 IAT Level II certification, such as one of the following: Security+ CE, CySA+, CASP+ CE, CCNA-Security, CCNP Security, CCSP, CISA, CISSP (or Associate), CND, GCED, GCIH, GICSP, GSEC, or SSCP

• Bachelor's degree with 8+ years of relevant experience

• Tenable ACAS 201 certification.
• Experience connecting or correlating ACAS data with asset-management, endpoint-security, configuration-management, ticketing or vulnerability-tracking tools.
• Experience using Tanium, Trellix, Microsoft Defender for Endpoint or similar endpoint tools to support remediation and asset validation.
• Experience building automated reports, dashboards or data-analysis products with PowerShell, Python, SQL or similar tools.
• Experience supporting vulnerability exception management, risk acceptance workflows, Plans of Action and Milestones (POA&Ms) and remediation governance.
• Other relevant Tenable, vulnerability-management, Microsoft, Linux or cybersecurity certifications.

• Customer Experience: Strive for excellence and delight our clients
• Innovation: Embrace creative thinking to enable continual growth and powerful solutions
• Accountability: Take ownership of and pride in our actions and service delivery
• Inspire: Be inspired to be your best self and have fun in the process
• Integrity: Do the right thing, the right way, every time!
• Stewardship: The careful and responsible management of something entrusted to our care.

NOTICE: Please be aware that all JCS Solutions communications related to job interviews and offers from our recruiting team will only come from @JCSSolutions.com. We want to emphasize that we do not conduct any interviews over Discord, Slack, Skype, Zoom, or any chat app.