Vulnerability Management & ACAS Administrator

What you'll do

• Administer, operate, and troubleshoot ACAS/Nessus infrastructure across NIPRNet, SIPRNet, and JWICS environments.
• Maintain scanner health, asset coverage, and vulnerability-data quality across all supported networks.
• Plan and execute authenticated and unauthenticated vulnerability scans based on operational requirements.
• Analyze scan results to validate findings, identify false positives, and assess mission impact.
• Prioritize vulnerabilities based on severity, exploitability, and asset criticality.
• Coordinate with system owners and technical teams to facilitate and verify vulnerability remediation.
• Develop and maintain vulnerability-management metrics, dashboards, and recurring reports for leadership.
• Create and maintain standard operating procedures, troubleshooting guides, and knowledge articles for ACAS.

What we're looking for

• Bachelor’s degree and 7+ years of relevant cybersecurity, vulnerability management, systems administration, or information assurance experience; or additional relevant experience in lieu of a degree.
• At least 7 years of hands-on experience serving as an ACAS/Nessus subject-matter expert in a large enterprise or Department of War environment.
• Experience administering and operating ACAS/Nessus infrastructure, including scanner deployment, configuration, health monitoring, scan-policy administration, plugin management, credentialed scanning, troubleshooting, and reporting.
• Experience managing vulnerability scanning operations across multiple security domains, including NIPRNet, SIPRNet, and JWICS or comparable enterprise environments.
• Experience analyzing vulnerability findings, validating scan results, identifying false positives, prioritizing remediation, and verifying closure.
• Experience developing vulnerability-management reports, metrics, dashboards, and leadership-level status products.
• Working knowledge of Microsoft Windows, Linux, virtualization technologies, networking concepts, STIG compliance, and security-hardening practices.
• Must meet DoD 8570.01-M IAT Level II certification requirements (e.g., CompTIA Security+ CE) and possess an active Top Secret/Sensitive Compartmented Information (TS/SCI) clearance.
• Tenable Assured Compliance Assessment Solution (ACAS) 201 certification (preferred).
• Experience using Tanium, Trellix, Microsoft Defender for Endpoint, or similar platforms to support vulnerability remediation (preferred).
• Experience developing automated reports or data-analysis products using PowerShell, Python, or SQL (preferred).