Cybersecurity and Vulnerability Management Systems Administrator

NexGen Data Systems; Columbus (OH); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Premium health insurance for employee

401(k) match

Training & development program

Paid holidays

Job summary

NexGen Data Systems is seeking a Cybersecurity and Vulnerability Management Systems Administrator to secure DoD enterprise applications and servers, remediate vulnerabilities, and support audit readiness across NIPRNet, SIPRNet, physical, virtual, and cloud environments.

The role involves IAVM compliance, RMF artifact maintenance, STIG/SCAP validation, and coordination with system owners to ensure no critical vulnerabilities remain unmitigated. A DoD security clearance is required.

Qualifications

• Active DoD Secret clearance required.
• Minimum seven years of progressive information processing or systems administration experience.
• BA/BS in a technical discipline with at least 10 years of specialized experience.

Responsibilities

• Review and remediate application, OS, server, and infrastructure vulnerabilities.
• Support compliance with the DoD vulnerability management program.
• Analyze ACAS findings and prioritize remediation by severity and mission impact.
• Apply DISA STIGs and SCAP outputs.
• Coordinate patching, secure config changes, and maintenance outages.

Skills

IAVM

ACAS

STIG

SCAP

RMF

Vulnerability remediation

Audit readiness

Education

BA/BS in technical discipline

Tools

Tenable

STIG Viewer

eMASS

Job description

Description

NexGen Data Systems is seeking a Cybersecurity and Vulnerability Management Systems Administrator to secure DLA enterprise applications and servers, remediate vulnerabilities, maintain Risk Management Framework documentation, and support audit readiness across NIPRNet, SIPRNet, physical, virtual, and cloud-based environments.

The position will perform IAVM compliance, STIG and SCAP validation, ACAS remediation, POA&M and AORA development, BCSA documentation, RMF artifact maintenance, and support for Cybersecurity Vulnerability Assessments and Command Cyber Readiness Inspections.

Roles & Responsibilities:

• Review and remediate application, operating system, server, and infrastructure vulnerabilities.
• Support compliance with the DoD Information Assurance Vulnerability Management program.
• Analyze ACAS findings and prioritize remediation based on severity, exploitability, mission impact, and required completion dates.
• Apply and validate DISA Security Technical Implementation Guides and Security Content Automation Protocol outputs.
• Coordinate patching, secure configuration changes, application updates, and maintenance outages with system owners and technical teams.
• Develop vulnerability remediation plans and track corrective actions through closure.
• Identify findings requiring a Plan of Action and Milestones or Authorization Official Risk Assessment.
• Draft and maintain POA&Ms, AORAs, risk assessments, mitigation statements, milestone dates, and closure evidence.
• Develop and maintain RMF artifacts, standard operating procedures, STIG checklist outputs, scan results, and security documentation.
• Update Government cybersecurity repositories with current and accurate artifacts.
• Support Baseline Cyber Security Assessment approval and ongoing maintenance.
• Serve as a technical subject matter resource to DLA cybersecurity personnel and management.
• Support Cybersecurity Vulnerability Assessments, Command Cyber Readiness Inspections, audit readiness reviews, evidence requests, and remediation activities.
• Ensure no critical vulnerability remains unmitigated without documented Government-approved risk treatment.
• Transfer security playbooks, STIG and ACAS history, BCSA records, POA&Ms, AORAs, and audit artifacts during transition-out.

Other Duties:

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.

Requirements

Desired/Required Skills:

• Clearance Required: Active Department of Defense Secret clearance required.
• Investigation / Position Sensitivity: Critical Sensitive / IT-I position requiring a favorable Tier 5 investigation because the duties require privileged systems and security-tool access.
• Required Cyber Baseline Certification: Active IAT Level II or higher certification.
• Required Computing Environment Certification: Microsoft Certified Solutions Expert Windows Server 2016, Microsoft Certified Azure Solutions Architect Expert, or current DLA-approved equivalent.
• Required DoD 8140 Qualification: Must maintain applicable foundational and computing-environment qualifications.
• Required Education: BA/BS in a technical discipline with at least 10 years of specialized experience. (Specialized experience is defined as progressive experience in the field of Information Processing, where the majority are specialized in numerous specialized Information Processing disciplines involving a range of hardware/software solutions, at least four years of which are concentrated, hand-on experience in installing, configuring, maintaining, and resolving issues with various software.
• Required Experience: Minimum seven years of progressive information processing or systems administration experience.
• Specialized Experience: At least six years supporting multiple hardware, software, application, security, or infrastructure disciplines.
• Hands-On Experience: At least four years installing, configuring, maintaining, securing, and resolving issues with enterprise software or systems.
• Required Vulnerability Experience: ACAS, STIG, SCAP, IAVM, patching, secure configuration, vulnerability validation, and remediation tracking.
• Required RMF Experience: Experience maintaining RMF packages, BCSA artifacts, POA&Ms, AORAs, risk assessments, and authorization evidence.
• Required Audit Experience: Experience supporting CVA, CCRI, cybersecurity audits, inspections, or control validation exercises.
• Desired Skills: ACAS/Tenable, STIG Viewer, SCC, SCAP, Windows Server, IIS, SQL, ServiceNow, eMASS or equivalent RMF repository, and cybersecurity reporting.

About the Company:

NexGen Data Systems is an emerging technologies focused company providing expert systems and network engineering solutions to the Department of Defense. NexGen Data Systems promotes a culture of knowledge and career advancement through continued learning, keeping our team current on the latest advances in systems and networking, and enabling our team to provide the best available solutions to our clients.

Benefits:

• Company covers 100% of premiums for the employee’s medical, dental, and vision insurance and subsidizes premiums for spouse and dependents.
• Company provides short and long term disability plans.
• 401(k) match up to 10% of the employee’s salary contributions to 401(K) plan.
• Comprehensive training and development program.
• 11 paid holidays and paid time off (PTO) accrual level starts at 15 days annually.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.

NOTE: US Citizens and those authorized to work in the US are encouraged to apply. In order to be qualified for this position, you must be able to obtain and maintain a United States Department of Defense (DoD) security clearance. We are unable to sponsor Visas at this time. NexGen Data Systems provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws.