Enterprise Vulnerability & STIG Manager

Booz Allen; Norfolk (VA); Presencial; USD 99.000 - 225.000; Jornada completa

Descripción de la vacante

Booz Allen Hamilton is seeking a Vulnerability Management professional to support DoD clients by modernizing ACAS capabilities and designing enterprise-scale STIG compliance solutions. This role acts as a trusted advisor and technical lead to move from fragmented compliance to repeatable enterprise cyber risk management and continuous monitoring.

You will design contractor-operated workflows, integrate outputs with PMO/ATO processes, and produce executive-level briefings on risk posture and

Formación

• Experience with ACAS in enterprise environments and vulnerability management.
• Knowledge of RMF, NIST 800-53, and POA&M processes for continuous monitoring.
• Ability to design enterprise STIG compliance solutions and implement automation.
• Active TS/SCI clearance or eligibility is required.

Responsabilidades

• Lead ACAS modernization efforts and transition Tenable deployments to enterprise VM services.
• Standardize scan policies, credentialed coverage, asset tagging, and data hygiene.
• Design contractor-operated workflows for vulnerability intake, remediation, and risk acceptance.
• Integrate ACAS outputs with POA&M, ATO sustainment, and reporting requirements.
• Advise stakeholders on vulnerability prioritization and risk tradeoffs within RMF.
• Automate repeatable tasks using scripting and workflow tools and integrate with ticketing/GRC systems.

Conocimientos

ACAS

Tenable.sc

Nessus

RMF

NIST 800-53

POA&M management

Zero Trust

Educación

Bachelor's degree

Master's degree

Associate's degree

Herramientas

SCC

OpenSCAP

Vendor STIG solutions

ServiceNow

Descripción del empleo

Booz Allen Hamilton is seeking a Vulnerability Management professional to support DoD clients by modernizing ACAS capabilities and designing enterprise-scale STIG compliance solutions. This role acts as a trusted advisor and technical lead to move from fragmented compliance to repeatable enterprise cyber risk management and continuous monitoring.

You will design contractor-operated workflows, integrate outputs with PMO/ATO processes, and produce executive-level briefings on risk posture and