Vulnerability Management, ACAS Analyst – Journeyman

This is a fully remote position, open to applicants in Illinois.

📋 Description

• Evaluate ACAS vulnerability findings received from Government personnel.

• Assess findings to pinpoint affected assets, systems, applications, devices, and responsible support teams.

• Reconcile affected assets with configuration-management, inventory, and asset-management records.

• Investigate discrepancies between ACAS results and authoritative asset inventories.

• Assist in prioritizing vulnerabilities based on severity, asset criticality, mission impact, remediation deadlines, and Government directives.

• Collaborate on corrective actions with system administrators, infrastructure teams, application teams, engineers, and other remediation stakeholders.

• Create, update, and oversee vulnerability-remediation tickets.

• Monitor owners, corrective actions, technical dependencies, target completion dates, and remediation status.

• Follow up with responsible personnel for status updates and remediation delays.

• Gather and review technical documentation, screenshots, configuration results, ticket records, and other evidence related to remediation.

• Coordinate Government rescan requests and analyze rescan results to confirm remediation.

• Document validated closures and retain supporting evidence in the designated Government repository.

• Track compliance with Information Assurance Vulnerability Alerts and Information Assurance Vulnerability Management requirements.

• Create and update POA&M entries for vulnerabilities needing formal corrective-action tracking.

• Maintain vulnerability status information for reports, dashboards, compliance reviews, and cybersecurity inspections.

• Identify and escalate overdue, high-risk, recurring, or unresolved findings.

• Monitor remediation dependencies related to patch availability, configuration changes, application testing, maintenance windows, or operational constraints.

• Assist in documenting false positives, mitigating controls, operational dependencies, and Government-approved risk decisions.

• Support the review of Endpoint Security Solutions reports and endpoint-security findings.

• Develop reports on vulnerability aging, remediation summaries, compliance metrics, and briefing materials.

• Identify recurring vulnerabilities, process gaps, inaccurate asset records, and opportunities for workflow improvement.

• Aid in the maintenance of vulnerability-management procedures, SOPs, tracking tools, and reporting templates.

⛳️ Requirements

• Active Secret clearance or higher.

• Bachelor’s degree in Cybersecurity, Information Systems, or a related field.

• At least 7 years of relevant experience in cybersecurity, information assurance, vulnerability management, or information security.

• Current CompTIA Security+ certification.

• Preferred: CompTIA Cybersecurity Analyst (CySA+) certification.

• Preferred: Experience reviewing ACAS or Tenable vulnerability-scan results in a Department of Defense environment.

• Preferred: Experience reconciling vulnerability findings against hardware, software, configuration-management, or asset-inventory records.

• Preferred: Experience coordinating vulnerability remediation with system administrators, infrastructure teams, and application support teams.

• Preferred: Knowledge of Information Assurance Vulnerability Alerts and Information Assurance Vulnerability Management requirements.

• Preferred: Experience creating and maintaining cybersecurity POA&Ms.

• Preferred: Proficiency in using ServiceNow or another ticketing and workflow-management platform.

• Preferred: Familiarity with Endpoint Security Solutions, STIG Viewer, SCAP tools, eMASS, or similar DoD cybersecurity technologies.

• Preferred: Knowledge of the DoD Risk Management Framework, NIST SP 800-53 controls, DISA Security Technical Implementation Guides, and relevant DoD cybersecurity directives.

• Preferred: Experience in collecting, reviewing, and maintaining technical evidence for supporting vulnerability remediation and closure.

• Preferred: Experience coordinating rescans and reviewing results to confirm successful remediation.

• Preferred: Experience preparing vulnerability reports, remediation metrics, aging summaries, dashboards, or inspection-support materials.

• Preferred: Familiarity with current DoD 8140 cybersecurity workforce qualification requirements.

• Strong analytical, organizational, documentation, communication, and follow-through skills.

• Ability to manage multiple findings, owners, dependencies, and deadlines in a structured compliance environment.

🏝️ Benefits

• Active Secret clearance or higher is a requirement for this role.

• Opportunity to contribute to a USMEPCOM ENLIST government contract program.

• Remote work arrangement available.

• Resume may be considered for this position and other similar roles across DecisionPoint subsidiaries, affiliates, and teaming partners.