Senior ACAS & Vulnerability Management Lead

Global-Enterprise-Services,-LL; Fort Belvoir (VA); On-site; USD 160,000 - 175,000; Full time

Job summary

GES is seeking a Vulnerability Management & ACAS Administrator to support a large-scale DoD contract in Fort Belvoir, VA. The role centers on ACAS/Nessus administration across NIPRNet, SIPRNet, and JWICS, ensuring coverage and high-quality reporting.

You will provide expertise, coordinate remediation with system owners and teams, develop metrics and dashboards, and maintain SOPs while meeting tight vulnerability remediation timelines.

Qualifications

• Bachelor’s degree and 7+ years of cybersecurity or information assurance experience.
• 7+ years as ACAS/Nessus SME in large enterprise or DoD environment.
• Experience administering ACAS/Nessus infrastructure, scanners, policies, credentials, and reporting.
• Experience across NIPRNet, SIPRNet, and JWICS environments.

Responsibilities

• Serve as the primary technical lead for ACAS/Nessus vulnerability scanning across multiple networks.
• Administer, operate, and troubleshoot ACAS/Nessus infrastructure and scanning configurations.
• Ensure scanner health, asset coverage, and data quality across environments.
• Coordinate authenticated and unauthenticated scans per schedules and maintenance windows.
• Analyze findings, validate results, identify false positives, and assess impact.
• Prioritize vulnerabilities based on severity and remediation timelines.
• Coordinate remediation activities with system administrators and teams.
• Track vulnerabilities and remediation actions in approved tracking systems.
• Develop and maintain vulnerability-management metrics, dashboards, and leadership reports.
• Identify coverage gaps, credentialed-scan failures, and asset-inventory discrepancies.
• Support STIG compliance activities by mapping findings to hardening requirements.

Skills

ACAS/Nessus expert

Vulnerability management

DoD 8570 IAT II

TS/SCI clearance

Education

Bachelor's degree

Tools

ACAS/Nessus infrastructure

STIG compliance

SCAP SCC

Tanium

Job description

GES is seeking a Vulnerability Management & ACAS Administrator to support a large-scale DoD contract in Fort Belvoir, VA. The role centers on ACAS/Nessus administration across NIPRNet, SIPRNet, and JWICS, ensuring coverage and high-quality reporting.

You will provide expertise, coordinate remediation with system owners and teams, develop metrics and dashboards, and maintain SOPs while meeting tight vulnerability remediation timelines.