DoD InfoSec Analyst – STIG & Vulnerability Remediation

The One 23 Group; Fort Gregg-Adams (VA); Presencial; USD 90.000 - 130.000; Jornada completa

Descripción de la vacante

The One 23 Group is seeking an Information Security Analyst (Journeyman) to join a dedicated remediation team supporting the DCOE. You will analyze vulnerability findings, coordinate with desktop and systems admins, and implement fixes to address STIG non-compliances and IAVMs, delivering verification artifacts to government stakeholders.

Responsibilities include POA&M execution, patch deployment, GPO adjustments, and evidence collection for government validation.

Formación

• Bachelor’s degree in a related field and 5 years of relevant experience.
• Active DoD 8140 foundational certification is required.
• ITIL v4 Foundation certification is preferred or obtainable post-hire.
• Experience with ACAS/Tenable Nessus and SCAP/SCC tools.
• Knowledge of DISA STIGs, SRGs, and CVSS scoring.

Responsabilidades

• Review vulnerability scans (ACAS/Nessus) and prioritize actions by severity.
• Execute POA&M work orders and remediation tasks per government plans.
• Remediate vulnerabilities via patching, GPOs, and baseline configuration.
• Hardening of Windows endpoints and documentation of remediation steps.
• Collect artifacts and evidence for government validation and closure.
• Coordinate with desktop/SYSTEM admins and ISSM/ISSO personnel.

Conocimientos

Vulnerability remediation

POA&M management

DISA STIGs

GPO configuration

Patch deployment

SCAP tools

Educación

Bachelor’s degree

Five years of relevant experience

DoD 8140 Foundational Certification

ITIL v4 Foundation

Herramientas

ACAS

Tenable Nessus

SCAP tooling

ServiceNow

BMC Remedy

Ivanti

Descripción del empleo

The One 23 Group is seeking an Information Security Analyst (Journeyman) to join a dedicated remediation team supporting the DCOE. You will analyze vulnerability findings, coordinate with desktop and systems admins, and implement fixes to address STIG non-compliances and IAVMs, delivering verification artifacts to government stakeholders.

Responsibilities include POA&M execution, patch deployment, GPO adjustments, and evidence collection for government validation.