InfoSec Analyst - Patch Automation & RMF Compliance

American Operations Corporation; Lincoln (MA); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Health Insurance

Retirement Plan (401k)

Life Insurance (Basic, Voluntary & AD&

Paid Time Off (Vacation, Sick & Public

Job summary

American Operations Corporation is seeking an Information Security Analyst to support the BLITS 3.0 program at Hanscom AFB, MA. You will identify, analyze, and remediate vulnerabilities across enterprise systems with automation-driven patch management and proactive collaboration.

The role emphasizes RMF/STIG compliance, Windows baselines, and effective communication with technical and non-technical stakeholders, while working in DoD security and IT environments.

Qualifications

• Experience with vulnerability management tools such as ACAS, Tenable, Nessus, Tanium, or Qualys.
• Strong knowledge of Windows OS and Windows Server baselines.
• Intermediate to advanced PowerShell scripting for automation.
• Experience with patch and configuration management processes.
• Familiarity with enterprise ITSM; ServiceNow preferred.
• Active DoD Secret clearance required; CompTIA Security+ CE or higher (CISSP/CISM) recommended.

Responsibilities

• Perform vulnerability scanning, assessment, and remediation tracking using ACAS/Nessus/Tanium.
• Analyze scan data and coordinate patching with admins and owners.
• Develop PowerShell scripts to automate config mgmt and patch deployment.
• Work in AD and Windows Server to implement secure baselines and GPOs.
• Coordinate vulnerability closure via ServiceNow or similar ticketing systems.
• Prepare status reports on vulnerability, patch compliance, and risk posture.
• Support RMF and STIG compliance with Cybersecurity, IT Ops, and Compliance teams.
• Proactively communicate findings and remediation guidance to stakeholders.
• Support HBSS/MECM to deploy patches and security updates.

Skills

Vulnerability assessment

Patch management

PowerShell scripting

Active Directory

GPO configurations

RMF/STIG compliance

Security clearance (DoD)

Security+ CE or higher (CISSP/CISM)

Tools

ACAS

Nessus

Tanium

Tenable

Qualys

ServiceNow

Job description

American Operations Corporation is seeking an Information Security Analyst to support the BLITS 3.0 program at Hanscom AFB, MA. You will identify, analyze, and remediate vulnerabilities across enterprise systems with automation-driven patch management and proactive collaboration.

The role emphasizes RMF/STIG compliance, Windows baselines, and effective communication with technical and non-technical stakeholders, while working in DoD security and IT environments.