Information Security Analyst - Journeyman (Mon – Fri)

The One 23 Group; Fort Gregg-Adams (VA); Presencial; USD 90.000 - 130.000; Jornada completa

Descripción de la vacante

The One 23 Group is seeking an Information Security Analyst (Journeyman) to join a dedicated remediation team supporting the DCOE. You will analyze vulnerability findings, coordinate with desktop and systems admins, and implement fixes to address STIG non-compliances and IAVMs, delivering verification artifacts to government stakeholders.

Responsibilities include POA&M execution, patch deployment, GPO adjustments, and evidence collection for government validation.

Formación

• Bachelor’s degree in a related field and 5 years of relevant experience.
• Active DoD 8140 foundational certification is required.
• ITIL v4 Foundation certification is preferred or obtainable post-hire.
• Experience with ACAS/Tenable Nessus and SCAP/SCC tools.
• Knowledge of DISA STIGs, SRGs, and CVSS scoring.

Responsabilidades

• Review vulnerability scans (ACAS/Nessus) and prioritize actions by severity.
• Execute POA&M work orders and remediation tasks per government plans.
• Remediate vulnerabilities via patching, GPOs, and baseline configuration.
• Hardening of Windows endpoints and documentation of remediation steps.
• Collect artifacts and evidence for government validation and closure.
• Coordinate with desktop/SYSTEM admins and ISSM/ISSO personnel.

Conocimientos

Vulnerability remediation

POA&M management

DISA STIGs

GPO configuration

Patch deployment

SCAP tools

Educación

Bachelor’s degree

Five years of relevant experience

DoD 8140 Foundational Certification

ITIL v4 Foundation

Herramientas

ACAS

Tenable Nessus

SCAP tooling

ServiceNow

BMC Remedy

Ivanti

Descripción del empleo

Description

At The One 23 Group, our mission is to set the benchmark for excellence in government services. We empower our clients in the Department of Defense (DoD), Intelligence Community, and Federal Civilian sectors to excel through advanced technical capabilities and dedicated mission support. Our foundation rests on a people-first culture, integrity, and proactive problem-solving.

The Defense Commissary Agency (DeCA) operates under the operational direction of Joint Force Headquarters–Department of Defense Information Network (JFHQ-DoDIN) and United States Cyber Command (USCYBERCOM) to defend and sustain the Department of Defense Information Network as a Tier-1 DoDIN Area of Operations (DAO). DeCA upholds rigorous compliance standards, including the Federal Information Security Modernization Act (FISMA), Payment Card Industry Data Security Standard (PCI-DSS), and the NIST Risk Management Framework (RMF).

• The Information Security Analyst (Journeyman) is part of a dedicated technical remediation team supporting the Desktop Common Operating Environment (DCOE). In this role, you will receive scan findings and government-directed POA&M work orders, analyze technical requirements, and coordinate directly with desktop and systems administrators to implement fixes, remediate non-compliant STIG configurations, resolve IAVMs, and deliver verification artifacts back to government stakeholders.

Primary Responsibilities

• Vulnerability Ingestion & Triage: Review and analyze vulnerability scan reports (ACAS/Tenable) and compliance exports provided by government scanning personnel; prioritize actions based on severity (CAT I/II/III, CVSS, and IAVM timelines).
• POA&M Work Order Execution: Receive, review, and execute technical work orders and corrective taskings tied to government-established Plans of Action and Milestones (POA&Ms); implement the necessary technical fixes to resolve underlying weaknesses.
• Hands-on Technical Remediation: Collaborate with Desktop Common Operating Environment (DCOE) administrators and systems engineers to remediate vulnerabilities through patch deployment, registry adjustments, Group Policy (GPO) configuration, and operating system baselines.
• STIG Remediation & Hardening: Review DISA Security Technical Implementation Guide (STIG) and SCAP compliance findings; implement technical controls on Windows endpoints and document remediation actions or technical hurdles.
• Remediation Artifact Collection: Gather, format, and provide technical artifacts, test results, and objective evidence to government personnel (ISSM/ISSO) to support government validation and closure of POA&M items.

Secondary Responsibilities

• Pre-Scan Validation & Coordination: Conduct local verification to confirm that patches, GPO modifications, and hardening scripts applied properly prior to requesting government re-scans.
• IAVM Tracking & Work Order Alignment: Track Information Assurance Vulnerability Management (IAVM) notices against assigned remediation work orders, ensuring timely implementation within required operational windows.
• Ticket Management & Work Order Tracking: Maintain accurate, up-to-date documentation on remediation activities and status updates inside enterprise ticketing systems (e.g., ServiceNow, BMC Remedy, Ivanti).
• Endpoint Protection Support: Coordinate with endpoint administrators to ensure McAfee/Trellix Endpoint Security Solutions (ESS/HBSS) agents are healthy and updated on target endpoints throughout remediation cycles.

Required Knowledge & Skills

• Ability to read, interpret, and prioritize vulnerability scan reports generated by ACAS (Tenable Nessus) and SCAP/SCC tools.
• Experience executing remediation work orders and tracking remediation tasks tied to government POA&Ms.
• Practical technical experience remediating cybersecurity findings in a Windows enterprise computing environment (e.g., GPO modifications, registry updates, script execution, and patch verification).
• Strong working knowledge of DISA STIGs, SRGs, and associated checklist formats (.ckl).
• Familiarity with DoD cybersecurity concepts, the DoD IAVM program, vulnerability categorization (CAT I, II, III), and CVSS scoring.
• Experience compiling objective remediation evidence and artifacts (e.g., command outputs, screenshots, configuration logs) for government validation.
• Working knowledge of enterprise ITSM/ticketing systems (e.g., ServiceNow, BMC Remedy, Ivanti) to track work orders and milestones.
• Basic understanding of Public Key Infrastructure (PKI) and endpoint protection tools (ESS/HBSS).
• Strong written and verbal communication skills for effective coordination with system administrators, engineering teams, and government leads.

Qualifications

• Education & Experience: Bachelor’s degree plus Five (5) years of relevant experience.
• DoD 8140 Foundational Certification (Required): Active certification (CEH(P), RCCE Level 1, Cloud+, CPTE, FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, or Security+).
• Computing Environment Training (Required or obtainable post-hire):
  • Training in ACAS/EMASS.
  • ITIL v4 Foundation certification (preferred / obtainable post-hire).

Clearance Requirement

Active DoD Secret clearance (or ability to obtain and maintain an interim Secret clearance prior to start).