DoD Vulnerability Analyst: RMF/ACAS Expert

absc-us; Arlington (VA); On-site; USD 90,000 - 155,000; Full time

Benefits offered by this job

PTO + Holidays

401k with match

Health & wellness allowance

Education and Training funds

Volunteer time off

Charitable match

Referral program

LOV Awards

Job summary

Absolute Business Solutions Corp (ABSC) seeks a Vulnerability Management Analyst to strengthen Air Force networks in the AFNCR ITS2 program. On-site work in the National Capital Region with some remote tasks possible with client approval.

You will support vulnerability detection, assessment, remediation, and RMF guidance, collaborating with ISSOs, engineers, and mission stakeholders to keep critical systems secure and compliant.

Qualifications

• Experience working in a regulated DoD environment.
• Strong analytical, troubleshooting, documentation, and communication skills.
• Ability to coordinate across technical teams and mission stakeholders.

Responsibilities

• Conduct vulnerability detection, assessment, analysis, and remediation using DoD- and Air Force-approved tools.
• Maintain ACAS capabilities and ensure proper scan configuration and execution.
• Prepare recurring vulnerability reports and trend analyses.
• Analyze scan data and logs to identify vulnerabilities and incidents.
• Coordinate remediation activities with cybersecurity offices and engineers.

Skills

Vulnerability management

Cybersecurity analysis

RMF knowledge

ACAS tooling

Incident response

Education

Bachelor’s degree in CS or related

Master’s degree in technical field

No degree required with 5+ years experience

Tools

ACAS

Tenable Security Center

Nessus

MECM

Job description

Absolute Business Solutions Corp (ABSC) seeks a Vulnerability Management Analyst to strengthen Air Force networks in the AFNCR ITS2 program. On-site work in the National Capital Region with some remote tasks possible with client approval.

You will support vulnerability detection, assessment, remediation, and RMF guidance, collaborating with ISSOs, engineers, and mission stakeholders to keep critical systems secure and compliant.