Senior DoD Information Security Analyst – STIG Remediation

The One 23 Group; Fort Gregg-Adams (VA); Presencial; USD 100.000 - 160.000; Jornada completa

Descripción de la vacante

The One 23 Group is a DoD-focused government services provider seeking an Information Security Analyst (Senior) to support the Desktop Common Operating Environment. The role centers on analyzing vulnerability findings, coordinating POA&M work orders, and delivering verification artifacts to government stakeholders.

Responsibilities include remediation of STIG findings on Windows endpoints, patch deployment, and documentation.

Formación

• Ability to read, interpret, and prioritize vulnerability scan reports generated by ACAS (Tenable Nessus) and SCAP/SCC tools.
• Experience executing remediation work orders and tracking remediation tasks tied to government POA&Ms.
• Practical technical experience remediating cybersecurity findings in a Windows enterprise computing environment (e.g., GPO modifications, registry updates, script execution, and patch verification).
• Strong working knowledge of DISA STIGs, SRGs, and associated checklist formats (.ckl).
• Familiarity with DoD cybersecurity concepts, the DoD IAVM program, vulnerability categorization (CAT I, II, III), and CVSS scoring.
• Experience compiling objective remediation evidence and artifacts (e.g., command outputs, screenshots, configuration logs) for government validation.
• Working knowledge of enterprise ITSM/ticketing systems (e.g., ServiceNow, BMC Remedy, Ivanti) to track work orders and milestones.

Responsabilidades

• Ingest vulnerability findings and triage by severity and IAVM timelines.
• Execute POA&M tasks and verify fixes on endpoints.
• Collaborate with DCOE admins to implement baselines and hardening.
• Document remediation actions and artifacts for ISSM/ISSO and government validation.
• Coordinate with government stakeholders to close POA&M items.

Conocimientos

Vulnerability analysis

ACAS/Nessus familiarity

POA&M execution

Windows remediation

DISA STIGs knowledge

IAVM familiarity

Artifact documentation

ServiceNow familiarity

Educación

Bachelor's degree

DoD 8140 Foundational Certification

ACAS/EMASS training

ITIL v4 Foundation

Herramientas

Tenable Nessus

SCAP/SCC tools

ServiceNow

Ivanti/BMC Remedy

Descripción del empleo

The One 23 Group is a DoD-focused government services provider seeking an Information Security Analyst (Senior) to support the Desktop Common Operating Environment. The role centers on analyzing vulnerability findings, coordinating POA&M work orders, and delivering verification artifacts to government stakeholders.

Responsibilities include remediation of STIG findings on Windows endpoints, patch deployment, and documentation.