Senior DoD InfoSec Analyst – Vulnerability Remediation

The One 23 Group; Fort Gregg-Adams (VA); On-site; USD 100,000 - 140,000; Full time

Job summary

The One 23 Group in Fort Gregg-Adams, VA is seeking an experienced Information Security Analyst (Senior) to support DoD clients. You will analyze vulnerability findings, implement POA&M items, and coordinate with desktop and systems teams to harden Windows endpoints and document verification artifacts.

The role requires active DoD Secret clearance or ability to obtain interim clearance, strong knowledge of STIGs, ACAS/Nessus, and government remediation processes, and proven written and verbal

Qualifications

• Ability to read, interpret, and prioritize vulnerability scans from ACAS and SCAP tools.
• Experience executing remediation work orders tied to government POA&M.
• Practical experience remediating cybersecurity findings in Windows environments (GPO/registry/patches).
• Strong knowledge of DISA STIGs, SRGs and checklist formats (.ckl).
• Familiarity with DoD cybersecurity concepts, IAVM, CAT I/II/III, CVSS scoring.
• Experience compiling remediation evidence for government validation.
• Proficient with enterprise ITSM systems to track work orders and milestones.
• Basic understanding of PKI and endpoint protection tools.
• Strong written and verbal communication with government stakeholders.

Responsibilities

• Vulnerability ingestion, triage, and prioritization by severity and timelines.
• POA&M work order execution and applying technical fixes.
• Hands-on remediation with patching, GPO changes, and OS baselines.
• Review STIGs and document remediation actions for government validation.
• Collect artifacts and evidence to support POA&M closure.
• Coordinate with DCOE admins and engineers during remediation.

Skills

Vulnerability reports interpretation

POA&M remediation

Windows remediation (GPO/patching)

DISA STIGs/SRGs knowledge

DoD cybersecurity concepts & IAVM

Remediation artifacts & evidence

ITSM/ticketing systems (ServiceNow/BMC

PKI & endpoint protection basics

Clear written/verbal communication

Education

Bachelor’s degree

DoD 8140 Foundational Certification

ACAS/EMASS training

ITIL v4 Foundation

Tools

ACAS/Nessus

SCAP/SCC tools

ServiceNow/BMC/Ivanti

Job description

The One 23 Group in Fort Gregg-Adams, VA is seeking an experienced Information Security Analyst (Senior) to support DoD clients. You will analyze vulnerability findings, implement POA&M items, and coordinate with desktop and systems teams to harden Windows endpoints and document verification artifacts.

The role requires active DoD Secret clearance or ability to obtain interim clearance, strong knowledge of STIGs, ACAS/Nessus, and government remediation processes, and proven written and verbal