Cybersecurity Engineer (ACAS)

SEMAIS; Columbus (OH); On-site; USD 110,000 - 150,000; Full time

Job summary

SEMAIS is seeking an experienced vulnerability management engineer to own the DoD logistics enterprise security posture. You will manage ACAS, Nessus components, and cloud workload coverage, delivering findings to remediation teams.

The role requires active DoD Secret clearance, on-site work in Columbus, OH or Richmond, VA, and travel up to six trips per year to DC/Columbus/Richmond. Contingent on contract award.

Qualifications

• Seven years of information technology experience, including four years maintaining vulnerability scanning solutions in a DoD environment.

Responsibilities

• Administer and sustain the enterprise vulnerability management platform across all DLA enclaves, covering Tenable Security Center, Nessus Scanners, Nessus Network Monitors, and Nessus Agents.
• Deploy and manage agent-based scanning so transient, remote, and disconnected endpoints stay continuously assessed.
• Engineer automated asset discovery and synchronization through APIs and cloud native integrations, so new cloud workloads and virtual machines enter scope without manual effort.
• Extend scanning coverage into authorized cloud environments including Microsoft Azure, Amazon Web Services, Oracle Cloud Infrastructure and Google Cloud Platform.
• Tune scan policies, credentialed scanning and scan windows to raise coverage and accuracy while protecting production performance.
• Execute credentialed vulnerability and DISA Security Technical Implementation Guide compliance scans across assigned IP ranges, subnets, cloud environments and platforms on DoD and DLA policy timelines.
• Manage, audit, and securely cycle scanning credentials and service accounts well enough to hold the mandated 98 percent authenticated scan success rate.
• Troubleshoot scan authentication failures, firewall blocking, and sensor routing anomalies that prevent a successful credentialed assessment.
• Produce the recurring vulnerability reporting that drives remediation decisions, and support exception and mitigation tracking.
• Make recommendations in line with the roles of CERT Incident Handlers and site Information Assurance Managers.

Skills

Vulnerability management

DoD environment

Credentialed scanning

Cloud security

Incident response liaison

Tools

Tenable Security Center

Nessus Scanners

Nessus Network Monitors

Nessus Agents

ACAS

Azure

AWS

Oracle Cloud Infrastructure

Google Cloud Platform

Job description

Who We Are

Secured Managed Instructional Systems, LLC (SEMAIS) is a Service-Disabled Veteran-Owned Small Business (SDVOSB) that protects mission systems critical to federal agencies. Our leadership brings more than 30 years of combined government experience in cybersecurity, digital modernization, and workforce readiness. Today we focus on exposure management and are developing the next stage of AI governance. We run every engagement with military discipline: we assess the security architecture, detect threats and exposures, and protect mission systems with aligned controls. At SEMAIS, you will join a small team where each person shapes the outcome and builds a career grounded in purpose. Veterans, military spouses, and civilians committed to service will find a strong fit on our team.

Status

Contingent upon contract award. These positions support a DLA cybersecurity requirement at DLA Weapons Support and depend on award of the task order to SEMAIS or a teaming prime contractor. We will keep every candidate informed of the award timeline.

Employment

W2, full-time and hourly with no benefits package

Location

On-site at DLA Weapons Support in Columbus, Ohio, or Richmond, Virginia. Alternate worksite only where the Government approves one.

Travel

Up to six round trips per year, roughly four days each to Washington DC, Columbus, OH, and Richmond, VA.

The Role

You will own enterprise vulnerability management for a DoD logistics enterprise. The work is hands-on engineering: keeping the Assured Compliance Assessment Solution healthy and accurate across every enclave, pushing coverage into cloud workloads, and turning scan output into findings that remediation teams can act on. You will work alongside the incident response team and the Information Assurance Managers, and your reporting will drive what gets fixed first.

Job Duties

• Administer and sustain the enterprise vulnerability management platform across all DLA enclaves, covering Tenable Security Center, Nessus Scanners, Nessus Network Monitors, and Nessus Agents.
• Deploy and manage agent-based scanning so transient, remote, and disconnected endpoints stay continuously assessed.
• Engineer automated asset discovery and synchronization through APIs and cloud native integrations, so new cloud workloads and virtual machines enter scope without manual effort.
• Extend scanning coverage into authorized cloud environments including Microsoft Azure, Amazon Web Services, Oracle Cloud Infrastructure and Google Cloud Platform.
• Tune scan policies, credentialed scanning and scan windows to raise coverage and accuracy while protecting production performance.
• Execute credentialed vulnerability and DISA Security Technical Implementation Guide compliance scans across assigned IP ranges, subnets, cloud environments and platforms on DoD and DLA policy timelines.
• Manage, audit, and securely cycle scanning credentials and service accounts well enough to hold the mandated 98 percent authenticated scan success rate.
• Troubleshoot scan authentication failures, firewall blocking, and sensor routing anomalies that prevent a successful credentialed assessment.
• Produce the recurring vulnerability reporting that drives remediation decisions, and support exception and mitigation tracking.
• Make recommendations in line with the roles of CERT Incident Handlers and site Information Assurance Managers.

Clearance

Active DoD Secret. The position is designated IT II Non-Critical Sensitive, which requires a Tier 3 investigation adjudicated and current at the time of proposal submission. Top Secret is not required.

Experience

Seven years of relevant information technology experience, including four years maintaining vulnerability scanning solutions in a DoD environment

Computing Environment

ACAS Administrator

DCWF 521 Primary

Cyber Defense Infrastructure Support, Intermediate proficiency. Any of: Security+, CySA+, CEH, SSCP, GSEC, GMON, Cloud+, or PenTest+.

DCWF 451 Primary

System Administrator, Intermediate proficiency. Any of: Security+, Cloud+, GSEC, GICSP, or SSCP. Certifications must align to the assigned work role under DoDM 8140.03.

SEMAIS is an equal opportunity employer. All qualified applicants receive consideration without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.