Be an Early Applicant
The Role
Administers and optimizes enterprise vulnerability management and endpoint security across Windows, Linux, virtual, and classified environments. Performs ACAS/Nessus scanning, Tanium endpoint assessment, Trellix security analysis, risk-based remediation prioritization, STIG hardening, exception evaluation, and cybersecurity reporting. Supports incident response, threat hunting, endpoint containment, RMF and authorization activities, POA&M documentation, and security-control assessments. Advises technical teams and leadership on cybersecurity risks, remediation strategies, security standards, and enterprise security improvements.
Summary Generated by Built In
Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success!
Job Summary
CS Solutions LLC is seeking a Vulnerability Management and Endpoint Security Administrator to provide cybersecurity expertise supporting enterprise IT operations on a high-profile Department of War (DoW) contract supporting DTRA. This role serves as a cybersecurity subject matter resource across Vulnerability Management and Endpoint Security teams, helping modernize, secure, and continuously improve enterprise IT services and mission capabilities across CONUS and OCONUS environments.
The ideal candidate brings deep experience with ACAS/Nessus, Tanium, and enterprise endpoint security technologies, along with the ability to independently assess cybersecurity risks, evaluate remediation strategies, and provide risk-based recommendations that balance mission requirements, operational needs, and security objectives.
Location: Fort Belvoir, VA
Clearance Required: Active TS/SCI
Salary Range: $70,000 to $100,000
What’s in it for you:
What you will do:
What you will bring:
How you will wow us:
JCS is both a Great Place to Work and a Top Places to Work certified company.
Our employees embody our core values, and we are looking for others who do too!
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to any protected status protected by applicable federal, state, or local laws.
Job Summary
CS Solutions LLC is seeking a Vulnerability Management and Endpoint Security Administrator to provide cybersecurity expertise supporting enterprise IT operations on a high-profile Department of War (DoW) contract supporting DTRA. This role serves as a cybersecurity subject matter resource across Vulnerability Management and Endpoint Security teams, helping modernize, secure, and continuously improve enterprise IT services and mission capabilities across CONUS and OCONUS environments.
The ideal candidate brings deep experience with ACAS/Nessus, Tanium, and enterprise endpoint security technologies, along with the ability to independently assess cybersecurity risks, evaluate remediation strategies, and provide risk-based recommendations that balance mission requirements, operational needs, and security objectives.
Location: Fort Belvoir, VA
Clearance Required: Active TS/SCI
Salary Range: $70,000 to $100,000
What’s in it for you:
- Analyze enterprise vulnerability and endpoint security posture across Windows, Linux, virtual, and enterprise environments.
- Administer and optimize ACAS/Nessus capabilities, including scan architecture, credentialed scanning, vulnerability analysis, reporting, and troubleshooting.
- Conduct in-depth vulnerability assessments and establish risk-based remediation priorities.
- Evaluate cybersecurity risks, compensating controls, remediation alternatives, and exception requests.
- Utilize Tanium to assess endpoint visibility, asset inventory, compliance posture, vulnerability exposure, and remediation requirements.
- Analyze endpoint-security posture using Trellix and associated technologies.
- Correlate security, compliance, vulnerability, and asset-management data to identify enterprise-wide risks and coverage gaps.
- Develop and recommend solutions to complex vulnerability-management and endpoint-security challenges.
- Assess vulnerability exceptions, risk-acceptance requests, and provide technical recommendations to leadership.
- Evaluate endpoint configurations and recommend security-hardening strategies aligned with STIG requirements.
- Develop dashboards, metrics, reporting, and executive-level cybersecurity summaries.
- Support incident response, threat hunting, and endpoint containment activities.
- Assess cybersecurity impacts of proposed infrastructure, software, and security-tool changes.
- Recommend improvements to vulnerability-management processes, technologies, and operating procedures.
- Develop and maintain technical standards, procedures, and knowledge documentation.
- Advise engineers, system owners, cybersecurity personnel, and leadership on risk and remediation strategies.
- Manage competing priorities while independently determining appropriate technical approaches within contractual and security requirements.
What you will do:
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related discipline and at least 4 years of relevant experience; or 8+ years of relevant experience in lieu of a degree.
- 4+ years of progressively responsible experience in vulnerability management, endpoint security, cybersecurity engineering, information assurance, or related enterprise cybersecurity functions.
- Demonstrated ability to independently assess cybersecurity vulnerabilities, evaluate risk, and recommend remediation strategies.
- Strong hands-on experience with ACAS/Nessus, including scanning, policy administration, credentialed scanning, reporting, remediation, and validation.
- Strong hands-on experience with Tanium for endpoint management, compliance analysis, visibility, asset inventory, and vulnerability remediation.
- Working knowledge of Trellix endpoint-security technologies.
- Experience conducting risk-based vulnerability analysis and establishing remediation priorities.
- Experience administering and securing both Microsoft Windows and Linux environments.
- Working knowledge of DISA STIG compliance, SCC, STIG Viewer, secure configuration baselines, and security-hardening methodologies.
- Knowledge of NIST, ICD, CNSS, and DoD cybersecurity requirements and standards.
- Excellent analytical, communication, organizational, and problem-solving skills.
- Active DoD 8140 IAT Level II certification (Security+ CE or equivalent).
- Ability to satisfy applicable DoD 8140 Cyber Workforce qualification requirements.
- Active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance.
What you will bring:
- Direct experience supporting FISMA Security Authorization activities, A&A/RMF processes, ATOs, NIST SP 800-53 control assessments, and authorization package development or maintenance.
- Experience developing, reviewing, or maintaining federal cybersecurity authorization documentation and artifacts.
- Hands-on experience with vulnerability management and/or security monitoring activities, including scan review, validation, prioritization, remediation coordination, and status reporting.
- Experience supporting incident response activities including alert triage, documentation, escalation, containment support, recovery coordination, and lessons learned.
- Experience documenting findings, risks, corrective actions, control evidence, and POA&M activities in an audit-ready environment.
- Ability to communicate cybersecurity and compliance requirements effectively to both technical and non-technical stakeholders.
- Ability to obtain or maintain an HHS Public Trust Tier II background investigation.
How you will wow us:
- Advanced expertise with Tanium Asset, Discover, Comply, Deploy, Patch, Interact, Reporting, and custom sensor development.
- Advanced ACAS/Nessus architecture, administration, dashboarding, credentialed scan troubleshooting, and enterprise reporting experience.
- Experience with Trellix ePO, Trellix Endpoint Security, Microsoft Defender for Endpoint, or comparable EDR platforms.
- Previous experience as an ISSO, ISSM, Cybersecurity Engineer, or similar cybersecurity leadership role.
- Experience supporting DoW environments, classified networks, or large-scale enterprise cybersecurity operations.
- Experience creating vulnerability-management dashboards, automated reporting solutions, and integrations using PowerShell, Python, SQL, or similar technologies.
- Experience evaluating POA&Ms, compensating controls, risk acceptance requests, and vulnerability exceptions.
- Experience advising technical and program leadership on cybersecurity strategy and risk management decisions.
- Relevant Microsoft, Linux, RHCSA, Linux+, or comparable technical certifications.
JCS is both a Great Place to Work and a Top Places to Work certified company.
Our employees embody our core values, and we are looking for others who do too!
- Customer Experience: Strive for excellence and delight our clients
- Innovation: Embrace creative thinking to enable continual growth and powerful solutions
- Accountability: Take ownership of and pride in our actions and service delivery
- Inspire: Be inspired to be your best self and have fun in the process
- Integrity: Do the right thing, the right way, every time!
- Stewardship: The careful and responsible management of something entrusted to our care.
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to any protected status protected by applicable federal, state, or local laws.
Skills Required
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related discipline, plus at least 4 years of relevant experience; alternatively, 8 or more years of relevant experience in lieu of a degree.
- At least 4 years of progressively responsible experience in vulnerability management, endpoint security, cybersecurity engineering, information assurance, or related enterprise cybersecurity functions.
- Ability to independently assess cybersecurity vulnerabilities, evaluate risk, and recommend remediation strategies.
- Hands-on experience with ACAS/Nessus, including scanning, policy administration, credentialed scanning, reporting, remediation, and validation.
- Hands-on experience with Tanium for endpoint management, compliance analysis, visibility, asset inventory, and vulnerability remediation.
- Working knowledge of Trellix endpoint-security technologies.
- Experience conducting risk-based vulnerability analysis and establishing remediation priorities.
- Experience administering and securing Microsoft Windows and Linux environments.
- Working knowledge of DISA STIG compliance, SCC, STIG Viewer, secure configuration baselines, and security-hardening methodologies.
- Knowledge of NIST, ICD, CNSS, and Department of Defense cybersecurity requirements and standards.
- Active DoD 8140 IAT Level II certification, such as Security+ CE or equivalent.
- Ability to satisfy applicable DoD 8140 Cyber Workforce qualification requirements.
- Active Top Secret/Sensitive Compartmented Information security clearance.
- Direct experience supporting FISMA security authorization, A&A/RMF processes, ATOs, NIST SP 800-53 control assessments, and authorization package development or maintenance.
- Experience developing, reviewing, or maintaining federal cybersecurity authorization documentation and artifacts.
- Experience with vulnerability management or security monitoring, including scan review, validation, prioritization, remediation coordination, and status reporting.
- Experience supporting incident response activities, including alert triage, documentation, escalation, containment support, recovery coordination, and lessons learned.
- Experience documenting findings, risks, corrective actions, control evidence, and POA&M activities in an audit-ready environment.
- Ability to communicate cybersecurity and compliance requirements to technical and non-technical stakeholders.
- Ability to obtain or maintain an HHS Public Trust Tier II background investigation.
- Advanced expertise with Tanium Asset, Discover, Comply, Deploy, Patch, Interact, Reporting, and custom sensor development.
- Advanced ACAS/Nessus architecture, administration, dashboarding, credentialed scan troubleshooting, and enterprise reporting experience.
- Experience with Trellix ePO, Trellix Endpoint Security, Microsoft Defender for Endpoint, or comparable EDR platforms.
- Previous experience as an ISSO, ISSM, Cybersecurity Engineer, or similar cybersecurity leadership role.
- Experience supporting Department of War environments, classified networks, or large-scale enterprise cybersecurity operations.
- Experience creating vulnerability-management dashboards, automated reporting solutions, and integrations using PowerShell, Python, SQL, or similar technologies.
- Experience evaluating POA&Ms, compensating controls, risk acceptance requests, and vulnerability exceptions.
- Experience advising technical and program leadership on cybersecurity strategy and risk management decisions.
- Relevant Microsoft, Linux, RHCSA, Linux+, or comparable technical certifications.
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
JCS is a premier technology firm specializing in enterprise-wide capabilities, digital transformation, software solutions, and IT services. We hold contracts in support of federal, state, and local government organizations in addition to assisting industry leaders in the private sector. Vision: Elevate the customer, the employee, and the community Mission: Delivering superior, mission-focused technology solutions to empower our clients. Our Services: • IT Services & Solutions • Cyber Security • Advanced Data Analytics • Health IT • Professional Services • Digital Transformation • Partner Network and Technology Certifications JCS is an 8(a) Certified Small Business, Economically Disadvantaged Woman-Owned Small Business (EDWOSB), Minority-Owned Small Business (MOSB), and Small Disadvantaged Business (SDB) based out of the Washington D.C. Metropolitan area. JCS is ISO 9001:2015, ISO/IEC 20000-1: 2018, ISO/IEC 27000: 2013 certified and appraised at CMMI Level 3 for both Development and Services. JCS is a Microsoft Gold and ServiceNow Premium partner. We are also certified as a “Great Place to Work.”
