InfoSec Lead: DoD RMF & Vulnerability Expert

Agile Defense; Virginia (MN); On-site; USD 100,000 - 140,000; Full time

Job summary

Agile Defense in Quantico, VA is seeking an Information Assurance & Compliance Lead to provide IS security support for enterprise assets, applying DoD STIG/IAVA and RMF processes to maintain secure and compliant systems. The role centers on ACAS-based vulnerability management and SCAP validation.

You will coordinate vulnerability scans, assist system engineers, prepare remediation reports, and support RMF package preparation for eMASS, while ensuring proper configuration and ongoing monitoring

Qualifications

• Bachelor’s degree and 5+ years of experience, or equivalent work experience.
• DoD 8570 IAT II Level Certification required (CCNA-Security, CySA, GICSP, GSEC, Security+CE, SSCP).

Responsibilities

• Conduct vulnerability scans and maintain an up-to-date inventory of scanned systems.
• Coordinate scans with system owners and provide results for mitigation.
• Validate device configurations and complete STIG checklists quarterly.
• Maintain configuration items and execute functions on vulnerability management platforms (ACAS, Nessus, SCAP).
• Create documentation such as procedures, scanning reports, remediation reports, and vulnerability metrics.
• Assist in RMF plan development and eMASS package preparation.
• Analyze threat feeds and communicate remediation findings to impacted teams.
• Provide technical support to system owners and document deviations.
• Log into network devices for troubleshooting and ensure device information is current.
• Track asset list changes and monitor scanning status in ACAS; use MDE to monitor security posture.

Skills

Vulnerability Management

ACAS/SCAP

ISSE

Security Policy Understanding

Communication Skills

Education

Bachelor’s degree or equivalent experience

Tools

ACAS

Nessus

SCAP

eMASS

Job description

Agile Defense in Quantico, VA is seeking an Information Assurance & Compliance Lead to provide IS security support for enterprise assets, applying DoD STIG/IAVA and RMF processes to maintain secure and compliant systems. The role centers on ACAS-based vulnerability management and SCAP validation.

You will coordinate vulnerability scans, assist system engineers, prepare remediation reports, and support RMF package preparation for eMASS, while ensuring proper configuration and ongoing monitoring