Enterprise Vulnerability Manager – DoD RMF & STIG

Booz Allen; Riverdale Park (MD); Presencial; USD 99.000 - 225.000; Jornada completa

Descripción de la vacante

Booz Allen Hamilton is seeking a Vulnerability Manager to lead ACAS modernization and enterprise STIG compliance for DoD clients. The role requires strong technical leadership, risk-based decision making, and experience with RMF and continuous monitoring.

You will drive automation, policy standardization, and collaboration with cyber engineering and RMF teams to align vulnerability management with Zero Trust initiatives. This position offers exposure to mission-critical DoD programs.

Formación

• Active TS/SCI clearance; willingness to take a polygraph exam.
• Associate’s degree and 5+ years of IT project experience and activities, Bachelor’s degree and 3+ years, or Master’s degree and 1+ years.

Responsabilidades

• Lead ACAS modernization efforts, transitioning Tenable deployments from basic scanning to enterprise vulnerability management services.
• Modernize ACAS implementation by standardizing scan policies, credentialed coverage, asset tagging, and data hygiene.
• Design contractor-operated workflows for vulnerability intake, prioritization, remediation tracking, and risk acceptance.
• Integrate ACAS outputs into customer POA&M processes, ATO sustainment activities, and reporting requirements.
• Advise government stakeholders on vulnerability prioritization, risk tradeoffs, and RMF integration.
• Partner with cyber engineering, architecture, and RMF teams to align vulnerability management with Zero Trust modernization initiatives.
• Produce executive-level briefings on cyber risk posture, trends, and remediation effectiveness.
• Develop enterprise STIG compliance frameworks enabling control inheritance, reuse, and automation across systems.
• Standardize STIG baselines, tailoring decisions, and documentation to reduce per-system compliance burden.
• Implement and maintain SCAP or STIG tooling across server, endpoint, and platform technologies.
• Produce defensible STIG artifacts and evidence packages to support ATOs and continuous monitoring.
• Advise system owners and ISSMs on remediation strategies and risk-based deviations.
• Automate repeatable tasks using scripting and workflow tooling, where feasible.
• Integrate ACAS and STIG outputs with customer ticketing, GRC, or reporting systems.

Conocimientos

IaC automation

DoD/IC experience

ACAS/Nessus

STIG compliance design

RMF/NIST 800-53

TS/SCI clearance

IAT Level III cert

DoD CSP cert

Educación

Associate’s degree

Bachelor’s degree

Master’s degree

Herramientas

ServiceNow

Xacta

eMASS

Descripción del empleo

Booz Allen Hamilton is seeking a Vulnerability Manager to lead ACAS modernization and enterprise STIG compliance for DoD clients. The role requires strong technical leadership, risk-based decision making, and experience with RMF and continuous monitoring.

You will drive automation, policy standardization, and collaboration with cyber engineering and RMF teams to align vulnerability management with Zero Trust initiatives. This position offers exposure to mission-critical DoD programs.