Vulnerability Management / ACAS Analyst (Journeyman)

DecisionPoint | Cortek; EUA; Teletrabalho; USD 90 000 - 130 000; Tempo integral

Resumo da oferta

DecisionPoint | Cortek seeks a Journeyman Vulnerability Management / ACAS Analyst to support USMEPCOM ENLIST program by tracking vulnerabilities, coordinating remediation, and supporting compliance reporting. This is a remote role with a preference for candidates in the Chicago area.

The analyst will review ACAS findings, reconcile assets with inventory records, manage tickets, and coordinate government rescan requests, ensuring accurate status for inspections and dashboards.

Qualificações

• Active Secret clearance is required.
• Bachelor's degree in Cybersecurity, Information Systems, or a related field.
• Minimum of 7 years of cybersecurity, information assurance, vulnerability management, or information-security experience.
• Current CompTIA Security+ certification.

Responsabilidades

• Review ACAS vulnerability findings provided by Government personnel.
• Coordinate remediation actions with system administrators and other teams.
• Track remediation tickets, deadlines, and POA&M updates.
• Review rescan data to verify remediation and maintain status dashboards.
• Develop vulnerability aging reports and compliance metrics.
• Assist with documenting false positives and risk decisions.

Conhecimentos

Active Secret clearance

Formação académica

Bachelor's degree in Cybersecurity, Information Systems, or a related field

Ferramentas

ACAS

Tenable

ServiceNow

Descrição da oferta de emprego

Overview

DecisionPoint seeks a Journeyman Vulnerability Management / ACAS Analyst to support vulnerability tracking, remediation coordination, and cybersecurity compliance reporting for the USMEPCOM ENLIST program. The Vulnerability Management / ACAS Analyst will review ACAS findings provided by Government personnel, reconcile affected systems and devices with inventory records, and coordinate corrective actions with responsible administrators. The analyst will track remediation tickets, dependencies, deadlines, POA&M updates, and supporting evidence through resolution. This role will also coordinate Government rescans, review the resulting data to verify remediation, and maintain accurate vulnerability status information for operational reporting, compliance reviews, and cybersecurity inspections. This position is remote, with a preference for candidates located in the Chicago area.

Note: By applying to this position, you acknowledge and consent to having your resume included in an active competitive government contract bid.

Duties & Responsibilities

The Vulnerability Management / ACAS Analyst will:

• Review ACAS vulnerability findings provided by Government personnel.
• Analyze findings to identify affected assets, systems, applications, devices, and responsible support teams.
• Reconcile affected assets against configuration-management, inventory, and asset-management records.
• Research discrepancies between ACAS results and authoritative asset inventories.
• Support prioritization of vulnerabilities based on severity, asset criticality, mission impact, remediation deadlines, and Government direction.
• Coordinate corrective actions with system administrators, infrastructure teams, application teams, engineers, and other remediation owners.
• Create, update, and monitor vulnerability-remediation tickets in the designated workflow system.
• Track assigned owners, corrective actions, technical dependencies, target completion dates, and current remediation status.
• Follow up with responsible personnel to obtain status updates and identify issues that could delay remediation.
• Collect technical documentation, screenshots, configuration results, ticket records, and other evidence supporting remediation completion.
• Review supporting evidence for completeness before requesting validation or rescanning.
• Coordinate Government rescan requests for vulnerabilities reported as remediated.
• Review Government-provided rescan results to verify that corrective actions successfully resolved identified vulnerabilities.
• Document validated closures and retain supporting evidence in the designated Government repository.
• Track compliance with applicable Information Assurance Vulnerability Alerts and Information Assurance Vulnerability Management requirements.
• Create and update POA&M entries for vulnerabilities requiring formal corrective-action tracking.
• Maintain accurate vulnerability status information for recurring reports, dashboards, compliance reviews, and cybersecurity inspections.
• Identify overdue, high-risk, recurring, or unresolved findings and escalation them to the Senior Vulnerability Management / ACAS Response Analyst or cybersecurity leadership.
• Track remediation dependencies involving patch availability, configuration changes, application testing, maintenance windows, or operational constraints.
• Assist with documenting false positives, mitigating controls, operational dependencies, and Government-approved risk decisions.
• Support review of Endpoint Security Solutions reports and tracking of applicable endpoint-security findings.
• Develop vulnerability aging reports, remediation status summaries, compliance metrics, and supporting briefing materials.
• Help identify recurring vulnerabilities, process gaps, inaccurate asset records, and opportunities to improve remediation workflows.
• Support maintenance of vulnerability-management procedures, standard operating procedures, tracking tools, and reporting templates.

Qualifications

Required Qualifications

• Active Secret clearance or higher.
• Bachelor's degree in Cybersecurity, Information Systems, or a related field.
• Minimum of 7 years of relevant cybersecurity, information assurance, vulnerability-management, or information-security experience.
• Current CompTIA Security+ certification.

Preferred Qualifications

• CompTIA Cybersecurity Analyst (CySA+) certification.
• Experience reviewing ACAS or Tenable vulnerability-scan results in a Department of Defense environment.
• Experience reconciling vulnerability findings against hardware, software, configuration-management, or asset-inventory records.
• Experience coordinating vulnerability remediation with system administrators, infrastructure teams, and application support teams.
• Knowledge of Information Assurance Vulnerability Alerts and Information Assurance Vulnerability Management requirements.
• Experience creating and maintaining cybersecurity POA&M.
• Experience using ServiceNow or another ticketing and wo