ACAS Administrator

Colonial Group; Alexandria, Northern (VA, KY); Hybrid; USD 90,000 - 120,000; Full time

Job summary

ASRC Federal is seeking an ACAS Administrator to support the DoDEA Enterprise Cyber Program. The role involves the installation, configuration, maintenance, and management of the ACAS suite to ensure compliance with DoD security requirements.

Responsibilities include performing vulnerability assessments, managing scan schedules, and generating reports to support continuous monitoring and risk management. A Bachelor’s degree and 2–4 years of ACAS experience, plus an active Secret or higher

Qualifications

• Bachelor’s degree or equivalent and 2–4 years of ACAS experience (Nessus).
• DoD IT environments experience required; familiarity with RMF and NIST SP 800-53 a plus.
• Active IAT II or higher certification such as Security+ or CISSP required.

Responsibilities

• Install and configure ACAS components to support security operations.
• Conduct regular vulnerability scans and analyze results with admins to remediate issues.
• Manage scan schedules and generate reports for risk assessment and compliance.
• Ensure compliance with DoD regulations and STIGs.
• Troubleshoot ACAS issues including connectivity and scan performance.
• Provide user guidance on scan results and ACAS usage.
• Maintain detailed records of configurations and procedures.

Skills

Analytical skills

Problem-solving

Communication

Independent worker

Education

Bachelor’s degree

IAT II or higher certification

Tools

ACAS (Nessus)

Security Center

Defender Vulnerability Management

Job description

ASRC Federal is seeking an ACAS Administrator to support the Department of Defense Education Activity (DoDEA) Enterprise Cyber Program

Active SECRET Clearance Required

TheACAS Administratoris responsible for the installation, configuration, maintenance, and management of the ACAS suite to ensure compliance with DoD security requirements. The role includes performing regular network vulnerability assessments, managing scan schedules, and generating reports to support continuous monitoring and risk management.

Key Responsibilities:

• Install and Configure ACAS: Deploy and configure ACAS components (Nessus scanners, Security Center, etc.) to support network security operations.
• Vulnerability Management: Conduct regular vulnerability scans, analyze results, and work with system administrators to remediate identified vulnerabilities.
• Compliance Monitoring: Ensure systems comply with DoD regulations and standards, including STIGs (Security Technical Implementation Guides).
• Reporting: Generate detailed reports on vulnerabilities, compliance status, and risk assessments for management and security teams.
• Troubleshooting: Diagnose and resolve issues related to the ACAS suite, including connectivity and scan performance issues.
• User Support: Provide guidance and support to users regarding the interpretation of scan results and the use of ACAS tools.
• Documentation: Maintain detailed records of configurations, procedures, and updates to the ACAS suite.

Required:

• Requires a Bachelor’s degree or equivalent, and 2–4 years of experience with ACAS (Tenable/Nessus) vulnerability management tools. Experience using ACAS in DoD IT environments is required.
• Working knowledge of the Microsoft Defender Vulnerability Management tool with the ability to perform baseline assessment.
• Certifications Required: Relevant IAT II or greater certifications required such as CompTIA Security+ or CISSP required.
• Technical Skills: Proficiency in network protocols, firewall management, and security best practices. Familiarity with DoD cybersecurity frameworks (RMF, NIST SP 800-53) is a plus.
• Clearance:Must hold an active Secret or Top-Secret clearance level

Desired Skills:

• CEH and ACAS certification or training is highly desirable.
• Strong analytical and problem-solving skills.
• Ability to work independently and as part of a team.
• Excellent communication skills, both verbal and written.