Job Title: Product Support Manager - Intermediate (Vulnerability Assessment Analyst)
Location: San Antonio, TX
Education: - BS degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science or Military Training or Approved DoD 8140 cyber-related certification
Certification: GLCS, CISSP
Position Description:
The Information Assurance (IA) Security Administrator – Vulnerability Assessment Analyst supports the DHA Domain and Directory Services Branch (DDSB) by performing continuous monitoring, vulnerability assessments, and remediation validation to protect enterprise IT systems. This role ensures compliance with the DoD Risk Management Framework (RMF), DHA security directives, and enterprise cybersecurity standards. The IA Security Vulnerability Assessment Analyst plays a vital role in reducing cyber risk across the DHA enterprise. By identifying vulnerabilities, validating remediations, and ensuring compliance with RMF and DoD directives, this role strengthens DHA’s cybersecurity posture and helps protect mission-critical healthcare IT systems across the Military Health System.
Conduct credentialed vulnerability scans using ACAS, Nessus, and related tools, ensuring complete coverage of enterprise servers, endpoints, and applications.
Identify, analyze, and report security vulnerabilities and misconfigurations, providing risk-based recommendations to system administrators and security teams.
Maintain accurate and up-to-date asset inventories in ACAS and eMASS, ensuring all systems are continuously scanned and tracked.
Develop and update Plan of Action and Milestones (POA&Ms) for vulnerabilities that cannot be immediately remediated, tracking progress and verifying closure.
Provide weekly and ad-hoc vulnerability reports in compliance with DHA reporting schedules and DoD cybersecurity requirements. · Collaborate with Control Assessors, Systems Administrators, and engineering teams to integrate vulnerability assessment results into risk assessments, change management processes, and accreditation packages.
Support incident response activities by identifying exploited vulnerabilities and documenting corrective actions.
Develops: o Weekly and on-demand vulnerability scan reports; Updated asset and compliance reports in ACAS/eMASS; POA&Ms documenting mitigation strategies and remediation progress o Security risk assessment documentation and validation artifacts; Vulnerability-related incident and corrective action reports
Skills Required
- Bachelor’s degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science; alternatively, military training or an approved DoD 8140 cyber-related certification
- GLCS certification
- CISSP certification
What We Do
BEAT's professionals work to help clients achieve sustainable value in their IT and business processes. Our team members average more than 25 years of industry experience and have supported numerous transformation and outsourcing projects across a wide variety of professional and academic disciplines. We are pleased to boast of our team's functional knowledge and experience in medical information technology, outsourcing, procurement, strategic planning and analysis of critical business processes as well as finance, accounting and human resources experience. At BEAT LLC, our number one priority is building lasting relationships based on earned trust, unyielding commitment to strong moral principles, and demonstrated performance-based outcomes. BEAT delivers tailored solutions for client organizations that generate results. Driven by our award-winning experience and applying industry best practices and programmatic discipline, BEAT provides effective solutions “on time” and within budget through our successful, highly qualified, and motivated teams.
