Information Assurance II (Vulnerability Assessment/ACAS Security Manager)

DLS Engineering; Montgomery (AL); On-site; USD 75,000 - 78,000; Full time

Benefits offered by this job

401k match

Health insurance

Vision insurance

Dental insurance

Life insurance

Disability insurance

Paid time off

Job summary

DLS Engineering in Montgomery, AL is seeking an Information Assurance II (Vulnerability Assessment/ACAS Security Manager) for a full-time, on-site role supporting the Air Force Intranet Control program at Gunter Annex.

The position focuses on evaluating defense-in-depth architectures, performing vulnerability scans with ACAS/NESSUS, producing risk-based reports, and coordinating with government stakeholders to implement POA&Ms and corrective actions.

Qualifications

• 3+ years of experience using security tooling to assess system and network vulnerabilities.
• IAT-II certification is required.
• Active Secret clearance is required.

Responsibilities

• Assess vulnerabilities and prioritize mitigation actions to reduce risk.
• Create and communicate government-facing reports on findings and proposed remediation.
• Manage hardware inventory and ensure only approved devices have access to the network.

Skills

NESSUS

ACAS

DISA STIGs

Audit Tools

Forescout

ESS

IAT-II certification

Active Secret clearance

Tools

ACAS

NESSUS

DISA STIGs

Forescout

ESS

Audit Tools

Job description

About DLS Engineering

DLS is an engineering firm with 30 years of Federal Government contracting experience. Our small business efficiencies coupled with a commitment to excellence allow us to provide reliable solutions with integrity for our nation's most critical defense and national security priorities.

Position Overview

DLS Engineering is seeking a Information Assurance II (Vulnerability Assessment/ACAS Security Manager) professional for a full-time position in support of the Air Force Intranet Control (AFINC) program at Gunter Annex in Montgomery, Alabama. This is an on-site position. As part of AFINC, the mission of the 26th Network Operations Squadron (26 NOS) is to provide mission assurance to the warfighter through the operation, management, and defense of the Department of Defense Information Network (DODIN). In the execution of its mission, the 26 NOS maintains network infrastructure, to include routers, switches, proxies, firewalls, servers, workstations, printers, Storage Area Networks (SAN) and test labs, to provide maneuverability and defense of both classified and unclassified networks.

A Day In The Life

• Measures effectiveness of defense-in-depth architecture against known vulnerabilities using available tools within organization to find them.
• Analyze, prioritize, and mitigate vulnerabilities to lower or eliminate risk.
• Create reports to effectively communicate to government problems and proposed solutions.
• Actively manage (inventory, track, and request corrective action) all hardware devices on network that only authorized devices is given access and unauthorized and unmanaged devices are found and prevented from gaining access.
• Conduct/review/validate vulnerability scans. Perform vulnerability scans to include analysis of results, identification of false positives, exceptions, and subsequent POA&Ms and/or MFRs creation, monitoring and reporting to include POA&M status and contributions to Monthly and Quarterly reports.
• Collects and reviews data gathered from a variety of tools (including intrusion detection system alerts, firewall, network traffic logs, and host system logs) to analyze events for possible attacks that occur within the environment. The environments can be computing, network, or enclave.
• Validates, investigates, and analyzes all response activities related to cyber incidents. These tasks include, but are not limited to: creating and maintaining incident tracking information; planning, coordinating, and directing recovery activities; and incident tracking information; and incidents analysis tasks, including examining all available information and supporting evidence of artifacts related to an incident or event.

When I Read The Below It Sounds Like Me

• 3+ years of experience in utilizing security relevant tools to include: NESSUS, ACAS, DISA STIGs, Audit Tools, Forescout, ESS, Performs assessments of system and network and identifies where the system/network deviate from acceptable configurations, DoW policy, or local policy/guidelines
• IAT-II certification (required)
• Active Secret clearance (required)

Other Information

• We offer a competitive salary and a 401k program with company match.
• We offer a comprehensive benefits package including health, vision, dental, life, and disability insurance.
• We offer a generous paid time off package
• If accommodation is needed with the application and / or the interview process for applicants with disabilities, please contact Human Resources at 757-494-5151.
• DLS is an E-Verify company.
• Must be able pass a government background check, which will be completed before employment.

DLS is an equal employment opportunity employer. Qualified applicants will receive consideration without regard to age, race, religion, sex (pregnancy, sexual orientation, gender identity), national origin, or disability. We encourage all qualified applicants to apply. If you believe you have been discriminated against, please contact Barbara Ellison. You also have the right to file a charge of discrimination with the equal employment opportunity commission.

Pay Range

75,000 - 78,000 USD per year(Montgomery, AL)