Cybersecurity and Vulnerability Management Systems Administrator

This is a fully remote position, open to applicants in Ohio.

📋 Description

• Review and address vulnerabilities in applications, operating systems, servers, and infrastructure.

• Assist in adhering to the DoD Information Assurance Vulnerability Management program.

• Evaluate ACAS findings and prioritize remediation efforts based on severity, exploitability, mission impact, and deadlines.

• Implement and verify DISA Security Technical Implementation Guides and SCAP outputs.

• Manage patching, secure configuration adjustments, application updates, and maintenance downtimes.

• Create vulnerability remediation strategies and monitor corrective actions until completion.

• Identify issues needing POA&Ms or AORAs.

• Prepare and keep updated POA&Ms, AORAs, risk assessments, mitigation statements, milestone dates, and closure documentation.

• Develop and update RMF artifacts, SOPs, STIG checklist outputs, scan results, and security documentation.

• Refresh Government cybersecurity repositories with current artifacts.

• Assist with the approval and maintenance of Baseline Cyber Security Assessments.

• Act as a technical subject matter expert for DLA cybersecurity personnel and management.

• Support Cybersecurity Vulnerability Assessments, Command Cyber Readiness Inspections, audit readiness reviews, evidence requests, and remediation efforts.

• Ensure that critical vulnerabilities have documented risk treatment approved by the Government.

• Transfer security playbooks, STIG and ACAS history, BCSA records, POA&Ms, AORAs, and audit artifacts during the transition-out process.

⛳️ Requirements

• Active Department of Defense Secret clearance is mandatory.

• Critical Sensitive / IT-I position requiring a favorable Tier 5 investigation.

• Active IAT Level II or higher certification is required.

• Microsoft Certified Solutions Expert in Windows Server 2016, Microsoft Certified Azure Solutions Architect Expert, or an equivalent currently approved by DLA.

• Must maintain relevant foundational and computing-environment qualifications in accordance with DoD 8140.

• BA/BS degree in a technical field is required.

• A minimum of 10 years of specialized experience in information processing.

• At least seven years of progressive experience in information processing or systems administration.

• Minimum of six years supporting various hardware, software, application, security, or infrastructure areas.

• At least four years of experience installing, configuring, maintaining, securing, and troubleshooting enterprise software or systems.

• Proficient in ACAS, STIG, SCAP, IAVM, patching, secure configuration, vulnerability validation, and remediation tracking.

• Experienced in maintaining RMF packages, BCSA artifacts, POA&Ms, AORAs, risk assessments, and authorization evidence.

• Background in supporting Cybersecurity Vulnerability Assessments, Command Cyber Readiness Inspections, cybersecurity audits, inspections, or control validation exercises.

• Preferred experience with ACAS/Tenable, STIG Viewer, SCC, SCAP, Windows Server, IIS, SQL, ServiceNow, eMASS or similar RMF repositories, and cybersecurity reporting.

• US citizenship or authorization to work in the United States is encouraged.

• Must be capable of obtaining and maintaining a United States Department of Defense security clearance.

• Visa sponsorship is not available.

🏝️ Benefits

• Company pays 100% of premiums for the employee’s medical, dental, and vision insurance.

• Subsidized premiums for spouses and dependents are offered.

• Short and long-term disability plans are available.

• 401(k) match of up to 10% of the employee’s salary contributions.

• Comprehensive training and development program provided.

• 11 paid holidays throughout the year.

• Paid time off (PTO) accrual begins at 15 days per year.

• Opportunities for continued learning and career advancement.