Remote RMF-Focused Vulnerability Management Specialist

Enterprise-Horizon-Consulting-Group; Mechanicsburg (Cumberland County); Remote; USD 90,000 - 120,000; Full time

Benefits offered by this job

Medical, Dental, & Vision Insurance

SIMPLE IRA with Company Match

Paid Federal Holidays

Vacation & Sick Leave

Life Insurance, Short-term Disability,

Long-term Disability

Job summary

Enterprise Horizon Consulting Group is seeking a Vulnerability Management Specialist to maintain DoD cybersecurity compliance and RMF processes. The role focuses on securing networks, managing RMF artifacts, and coordinating remediation with system owners.

Remote work environment with responsibilities including RMF accreditation support, ACAS scanning, and reporting using Tenable tools. A Secret clearance and Security+ (IAT II) are required, with 3–5 years of related experience.

Qualifications

• Active Secret clearance required.
• Security+ certification (IAT II).
• 3–5 years of hands-on vulnerability management experience.
• Familiarity with RMF, STIGs, IAVMs, and CCRI readiness.
• Experience with ACAS scanning and reporting.
• Experience with DoD cyber policies and DoD network environments.

Responsibilities

• Support RMF accreditation activities with DoD leadership.
• Manage RMF artifacts, control status, and ATO packages in eMASS.
• Configure and exec ACAS scans across enterprise systems and enclaves.
• Use Tenable tools to operate and maintain vulnerability management processes.
• Analyze scan results, validate findings, and coordinate remediation with system owners.
• Maintain vulnerability schedules, baselines, and DoD-compliant documentation.
• Monitor logs for anomalies and potential threats; assist investigations.

Skills

RMF

Vulnerability management

DoD RMF knowledge

Communication

Risk assessment

Analytical thinking

Tools

ACAS (Tenable)

eMASS

Tenable Security Center

Tenable Manager

STIGs

Job description

Enterprise Horizon Consulting Group is seeking a Vulnerability Management Specialist to maintain DoD cybersecurity compliance and RMF processes. The role focuses on securing networks, managing RMF artifacts, and coordinating remediation with system owners.

Remote work environment with responsibilities including RMF accreditation support, ACAS scanning, and reporting using Tenable tools. A Secret clearance and Security+ (IAT II) are required, with 3–5 years of related experience.