The Role
Lead ACAS and Nessus vulnerability scanning across NIPRNet, SIPRNet, and JWICS. Administer scanners, policies, plugins, credentials, schedules, and infrastructure; analyze findings, validate results, prioritize remediation, and verify closure. Coordinate with system owners and technical teams, maintain vulnerability metrics and dashboards, support STIG compliance, troubleshoot coverage and connectivity issues, and document procedures. The role requires extensive vulnerability-management experience, an active DoD IAT Level II certification, a bachelor's degree, and TS/SCI clearance.
Summary Generated by Built In
Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success!
Job Summary
JCS Solutions is seeking an experienced Vulnerability Management & ACAS Administrator to support a high-profile Department of War contract at Fort Belvoir, VA. The I3TS program provides enterprise-wide IT support to the Defense Threat Reduction Agency's Information Management & Technology Directorate. The program helps the directorate consolidate, modernize and improve the IT services and mission capabilities it delivers to mission partners in CONUS and OCONUS locations.
In this role, you will be the program's primary Assured Compliance Assessment Solution (ACAS) subject-matter expert and technical lead. You will own vulnerability scanning across NIPRNet, SIPRNet and the Joint Worldwide Intelligence Communications System (JWICS). You will keep scanners healthy and coverage complete, turn findings into clear and actionable reporting, and work with system owners and technical teams to get vulnerabilities fixed and confirmed closed. Your work directly reduces risk to the agency's mission.
Location: Fort Belvoir, VA
Clearance: TS/SCI
Salary: $70,000.00 - $100,000.00
Certification: Active DoD 8140/8570 IAT Level II certification
What’s in it for you:
- Join a premier technology firm specializing in innovative solutions.
- Be part of a collaborative, inclusive, and innovative work culture.
- Enjoy tremendous growth potential in a high-performing team environment.
- A robust benefits package:
- Health, dental, and vision insurance
- Life insurance
- Short-and-long term disability
- Paid time off (PTO)
- 401k retirement plan with employer match
- Annual Professional Development Reimbursement Program
- And more!
What you will do:
- Serve as the primary technical lead and subject-matter expert for ACAS and Nessus vulnerability scanning across NIPRNet, SIPRNet and JWICS.
- Administer, operate, maintain and troubleshoot the ACAS/Nessus infrastructure, including:
- scanners
- scan configurations, schedules and policies
- plugins and credentials
- associated management components
- Keep ACAS scanning capability, asset coverage, scanner health and vulnerability-data quality up to standard across all supported environments.
- Plan, coordinate and run authenticated and unauthenticated scans that follow approved schedules, operational requirements and maintenance windows.
- Analyze and validate scan results. Identify false positives, duplicate findings and scan-quality issues, and assess the possible impact on systems and mission operations.
- Prioritize vulnerabilities by severity, operational impact, exploitability, asset criticality and remediation timelines.
- Work with system administrators, network engineers, endpoint-security staff and system owners to drive remediation and verify closure.
- Track vulnerabilities, remediation actions, exceptions and status in approved tracking systems.
- Build and maintain vulnerability-management metrics, dashboards, trend analysis and recurring reports for technical staff, program leadership and customer stakeholders.
- Find and fix coverage gaps, credentialed-scan failures, connectivity problems, scanner performance issues and asset-inventory discrepancies.
- Support Security Technical Implementation Guide (STIG) compliance by matching ACAS findings to hardening requirements and remediation actions.
- Write and maintain ACAS standard operating procedures, operating instructions, scan procedures, troubleshooting guides and knowledge articles.
- Coordinate ACAS maintenance, upgrades, configuration changes and technical support with infrastructure, network, endpoint and cybersecurity teams.
- Advise leadership and stakeholders on ACAS capabilities, vulnerability trends, remediation priorities and operational risk.
- 8+ years of relevant cybersecurity, vulnerability management, systems administration or information assurance experience.
- 7+ years of hands-on experience as an ACAS/Nessus subject-matter expert in a large enterprise or Department of War environment.
- Proven experience running ACAS/Nessus infrastructure, including:
- scanner deployment, configuration and health monitoring
- scan-policy administration and plugin management
- credentialed scanning
- troubleshooting and reporting
- Experience managing vulnerability scanning across multiple security domains, including NIPRNet, SIPRNet and JWICS or comparable enterprise environments.
- Experience analyzing findings, validating scan results, identifying false positives, prioritizing remediation and verifying closure.
- Experience developing vulnerability-management reports, metrics, dashboards and leadership-level status products.
- Experience coordinating remediation with system administrators, network teams, endpoint-security teams and system owners.
- Working knowledge of Microsoft Windows, Linux, virtualization, networking concepts and enterprise endpoint environments.
- Working knowledge of:
- STIG compliance
- SCAP Compliance Checker (SCC) and STIG Viewer
- secure configuration baselines and security hardening
- Strong written, verbal, organizational, analytical and problem-solving skills.
- Able to work independently as the program's primary ACAS technical lead while coordinating well with cross-functional technical teams.
- An active DoD 8140 IAT Level II certification, such as one of the following: Security+ CE, CySA+, CASP+ CE, CCNA-Security, CCNP Security, CCSP, CISA, CISSP (or Associate), CND, GCED, GCIH, GICSP, GSEC, or SSCP
- Bachelor's degree with 8+ years of relevant experience
How you will wow us:
- Tenable ACAS 201 certification.
- Experience connecting or correlating ACAS data with asset-management, endpoint-security, configuration-management, ticketing or vulnerability-tracking tools.
- Experience using Tanium, Trellix, Microsoft Defender for Endpoint or similar endpoint tools to support remediation and asset validation.
- Experience building automated reports, dashboards or data-analysis products with PowerShell, Python, SQL or similar tools.
- Experience supporting vulnerability exception management, risk acceptance workflows, Plans of Action and Milestones (POA&Ms) and remediation governance.
- Other relevant Tenable, vulnerability-management, Microsoft, Linux or cybersecurity certifications.
JCS Solutions (JCS) is a premier technology firm providing innovative solutions and high-quality services in defense, national security, and civilian sectors. JCS offers enterprise-wide solutions including cloud computing, software development, cybersecurity, digital modernization, and management consulting for the federal government.
At JCS, we elevate our customers’ mission through the application of technology and professional services. Our commitment to investing in our workforce drives innovation and progress for our clients, employees, and communities.
JCS is both a Great Place to Work and a Top Places to Work certified company.
Our employees embody our core values, and we are looking for others who do too!
- Customer Experience: Strive for excellence and delight our clients
- Innovation: Embrace creative thinking to enable continual growth and powerful solutions
- Accountability: Take ownership of and pride in our actions and service delivery
- Inspire: Be inspired to be your best self and have fun in the process
- Integrity: Do the right thing, the right way, every time!
- Stewardship: The careful and responsible management of something entrusted to our care.
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to any protected status protected by applicable federal, state, or local laws.
Skills Required
- 8+ years of relevant cybersecurity, vulnerability management, systems administration, or information assurance experience
- 7+ years of hands-on ACAS/Nessus subject-matter expertise in a large enterprise or Department of War environment
- Experience deploying, configuring, and monitoring ACAS/Nessus scanners
- Experience administering scan policies and managing plugins
- Experience with credentialed scanning, troubleshooting, and vulnerability reporting
- Experience managing vulnerability scanning across NIPRNet, SIPRNet, JWICS, or comparable enterprise environments
- Experience analyzing findings, validating scan results, identifying false positives, prioritizing remediation, and verifying closure
- Experience developing vulnerability-management reports, metrics, dashboards, and leadership status products
- Experience coordinating remediation with system administrators, network teams, endpoint-security teams, and system owners
- Working knowledge of Microsoft Windows, Linux, virtualization, networking concepts, and enterprise endpoint environments
- Working knowledge of STIG compliance, SCAP Compliance Checker, STIG Viewer, secure configuration baselines, and security hardening
- Strong written, verbal, organizational, analytical, and problem-solving skills
- Ability to work independently as the primary ACAS technical lead and coordinate with cross-functional technical teams
- Active DoD 8140 IAT Level II certification, such as Security+ CE, CySA+, CASP+ CE, CCNA-Security, CCNP Security, CCSP, CISA, CISSP, CND, GCED, GCIH, GICSP, GSEC, or SSCP
- Bachelor's degree with 8+ years of relevant experience
- TS/SCI security clearance
- Tenable ACAS 201 certification
- Experience integrating ACAS data with asset-management, endpoint-security, configuration-management, ticketing, or vulnerability-tracking tools
- Experience using Tanium, Trellix, Microsoft Defender for Endpoint, or similar endpoint tools
- Experience building automated reports, dashboards, or data-analysis products with PowerShell, Python, SQL, or similar tools
- Experience supporting vulnerability exception management, risk acceptance workflows, POA&Ms, and remediation governance
- Other relevant Tenable, vulnerability-management, Microsoft, Linux, or cybersecurity certifications
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
JCS is a premier technology firm specializing in enterprise-wide capabilities, digital transformation, software solutions, and IT services. We hold contracts in support of federal, state, and local government organizations in addition to assisting industry leaders in the private sector. Vision: Elevate the customer, the employee, and the community Mission: Delivering superior, mission-focused technology solutions to empower our clients. Our Services: • IT Services & Solutions • Cyber Security • Advanced Data Analytics • Health IT • Professional Services • Digital Transformation • Partner Network and Technology Certifications JCS is an 8(a) Certified Small Business, Economically Disadvantaged Woman-Owned Small Business (EDWOSB), Minority-Owned Small Business (MOSB), and Small Disadvantaged Business (SDB) based out of the Washington D.C. Metropolitan area. JCS is ISO 9001:2015, ISO/IEC 20000-1: 2018, ISO/IEC 27000: 2013 certified and appraised at CMMI Level 3 for both Development and Services. JCS is a Microsoft Gold and ServiceNow Premium partner. We are also certified as a “Great Place to Work.”
