ACAS Security Engineer (TS/SCI) for USAF Networks

cFocus Software Incorporated; United States; On-site; USD 110,000 - 160,000; Full time

Job summary

cFocus Software Incorporated seeks an ACAS Engineer to join our USAF program. This position is on-site in Linthicum Heights, MD and requires an Active TS/SCI clearance.

You will configure, operate, and maintain ACAS and enterprise vulnerability scanning capabilities in coordination with government-approved baselines. You will conduct weekly scans, coordinate credentialed scanning, track coverage, analyze results, and prepare the Vulnerability Report using the CORA model for submission.

Qualifications

• Active TS/SCI clearance required.
• B.S. in Computer Science, IT, or related field required.
• Experience administering ACAS or similar enterprise vulnerability tools (scan configuration, scheduling, credentialed scanning, reporting).
• Ability to diagnose scan failures/authentication issues, assess coverage, validate findings, and verify remediation via follow-up scans.
• Working knowledge of enterprise networks, server operating systems, applications, virtual infra, and cloud or hybrid environments.
• Experience interpreting findings and coordinating patching, secure configuration changes, and STIG remediation.

Responsibilities

• Configure, operate, and maintain ACAS and enterprise vulnerability scanning capabilities per designs, baselines, and change procedures.
• Perform weekly vulnerability scans of DC3 networks and applications; coordinate credentialed scanning across IT and OT assets.
• Maintain scan scope and asset coverage records; identify missed assets and authentication problems and coordinate corrective action.
• Analyze scan results, validate findings, investigate false positives, and prioritize vulnerabilities with system owners and cybersecurity personnel.
• Prepare and submit Vulnerability Report using CORA scoring model to Government by Friday 5 p.m. ET.
• Track vulnerabilities through remediation and verification; coordinate patching and secure configuration changes; perform follow-up scans.
• Support continuous vulnerability monitoring and secure configuration management; provide findings for compliance reviews and posture reporting.
• Coordinate with sysadmins and engineers to remediate critical infrastructure vulnerabilities and implement Government-directed security requirements.
• Support automated Vulnerability Management Program via CI/CD workflows, scan analysis, remediation recommendations, and patch verification.
• Support IaC and CaC processes by evaluating security findings before deployment to production.
• Assist with enterprise scanning engine deployment for IOC due 180 days after transition-in; support ongoing NOC/SOC scanning.
• Provide vulnerability data and evidence supporting RMF assessments and ATO activities.
• Maintain scanning procedures and troubleshooting documentation.
• Coordinate with NOC, SOC, and incident response when findings indicate compromise or urgent exposure.

Skills

Active TS/SCI clearance

BS in Computer Science/Information IT

ACAS administration

Scan configuration

Scheduling

Credentialed scanning

Reporting

Diagnostics of scan failures

Network knowledge

Server OS

Applications knowledge

Virtual infrastructure

Cloud or hybrid environments

Vulnerability remediation coordination

Security compliance documentation

Communication with owners/ops

Education

B.S. Computer Science, Information Technology, or a related field

Job description

cFocus Software Incorporated seeks an ACAS Engineer to join our USAF program. This position is on-site in Linthicum Heights, MD and requires an Active TS/SCI clearance.

You will configure, operate, and maintain ACAS and enterprise vulnerability scanning capabilities in coordination with government-approved baselines. You will conduct weekly scans, coordinate credentialed scanning, track coverage, analyze results, and prepare the Vulnerability Report using the CORA model for submission.