DoD Windows Security Remediation Analyst

Cybersecurity Jobs; Fort Gregg-Adams (VA); On-site; USD 90,000 - 130,000; Full time

Job summary

The One 23 Group Inc. is seeking a Journeyman Information Security Analyst at Fort Gregg-Adams, VA.

You will support a remediation team focused on the Desktop Common Operating Environment (DCOE), turning vulnerability findings and POA&M work orders into verified fixes for Windows endpoints in government environments. Work with desktop and systems stakeholders to review scans, implement DISA STIG-aligned remediations, and provide objective evidence for validation and closure to government

Qualifications

• Bachelor’s degree plus five years of relevant experience.
• DoD 8140 Foundational Certification (e.g., CEH, RCCE Level 1, Cloud+, CPTE, FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, Security+).
• Active DoD Secret clearance or ability to obtain interim Secret clearance prior to start.
• Experience remediating Windows enterprise environments including GPO, registry updates, script execution, and patch verification.
• Familiarity with DISA STIGs, SRGs, and .ckl checklist formats.

Responsibilities

• Receive and analyze scan findings and POA&M work orders; coordinate with desktop admins to implement fixes and remediate STIGs.
• Review vulnerability scans (ACAS/Tenable) and government exports; prioritize actions using CVSS and IAVM timelines.
• Execute technical work orders and POA&M tasks to resolve weaknesses.
• Remediate vulnerabilities using patch deployment, registry changes, GPO configuration, and OS baselines.
• Document remediation actions and articulate obstacles for government validation.

Skills

Vulnerability analysis

Documentation

Team coordination

Communication

Patch verification

Education

Bachelor’s degree

Tools

ACAS/Tenable Nessus

SCAP

ServiceNow

BMC Remedy

Ivanti

Job description

The One 23 Group Inc. is seeking a Journeyman Information Security Analyst at Fort Gregg-Adams, VA.

You will support a remediation team focused on the Desktop Common Operating Environment (DCOE), turning vulnerability findings and POA&M work orders into verified fixes for Windows endpoints in government environments. Work with desktop and systems stakeholders to review scans, implement DISA STIG-aligned remediations, and provide objective evidence for validation and closure to government