Vulnerability Management Specialist

Enterprise Horizon Consulting Group; Mechanicsburg (Cumberland County); Remote; USD 95.000 - 130.000; Vollzeit

Benefits dieser Stelle

Medical, Dental, & Vision Insurance

SIMPLE IRA with Company Match

Paid Federal Holidays

Vacation & Sick Leave

Life Insurance, Short-term Disability,

Zusammenfassung

Enterprise Horizon Consulting Group is seeking a Vulnerability Management Specialist to join our remote team. The role focuses on maintaining compliance with DoD cybersecurity directives and supporting RMF processes across enterprise systems and enclaves.

You will manage ACAS scans using Tenable products, analyze findings, and work with system owners to remediate vulnerabilities while ensuring proper documentation and reporting per STIGs and CCRI readiness requirements.

Qualifikationen

• Active DoD Secret clearance required.
• Security+ certification (IAT II) required.
• 3–5 years of related experience.
• Hands-on ACAS vulnerability scanning and reporting experience.
• Familiarity with DoD RMF, STIGs, and DoD network environments.
• Strong analytical, troubleshooting, and communication skills.

Aufgaben

• Support RMF accreditation activities with DoD leadership.
• Manage RMF artifacts, control status, and ATO packages using eMASS.
• Configure and maintain ACAS scans across enterprise systems.
• Operate vulnerability management with Tenable Security Center/Manager.
• Analyze scan results, validate vulnerabilities, and coordinate remediation.
• Maintain vulnerability schedules, baselines, and DoD-compliant documentation.
• Monitor logs and events for anomalies and potential threats.
• Provide vulnerability management reporting and STIG/IAVM/CCRI guidance.
• Develop SOPs, POA&Ms, and knowledge-base materials for ACAS ops.
• Collaborate with ISSMs, admins, and DoD leadership to improve cyber defense.

Kenntnisse

Analytical

Troubleshooting

Communication

Tools

ACAS

Tenable Security Center

Tenable Manager

Jobbeschreibung

Company Overview

Enterprise Horizon Consulting Group (EHCG) is a Woman-Owned Small Business specializing in IT Consulting which has successfully delivered key capabilities to the Navy, Army, and NASA over the past 20+ years. EHCG provides best in class services to its customers in the following areas: Business Systems Services; Business Intelligence; Data Analytics and Dashboarding; Enterprise Resource Planning (SAP) Implementation; Legacy System Optimization; Digital Transformation; Cloud Migration; Integration and Modernization; and Risk Management Framework Processes (RMF).

Job Description

Enterprise Horizon is seeking a Vulnerability Management Specialist to join our team. This position plays a critical role in maintaining compliance with DoD cybersecurity directives, protecting networks, and supporting the Risk Management Framework (RMF) process.

Location

Remote

Core Responsibilities

• Work closely with DoD leadership to support Risk Management Framework (RMF) accreditation activities.
• Utilize eMASS to manage RMF artifacts, control status, and ATO packages.
• Introduce new tools and configuration standards to meet the increased Information Assurance (IA) accreditation requirements of auditability, reporting, monitoring, implementing and managing access controls.
• Plan, configure, and execute ACAS scans across enterprise systems, applications, and enclaves.
• Utilize Tenable Security Center and Tenable Manager to operate and maintain the vulnerability management process.
• Analyze scan results, validate vulnerabilities, and work with system owners to remediate findings.
• Maintain and update vulnerability scan schedules, baselines, and documentation in accordance with DoD guidance.
• Monitor system logs and security events to detect anomalies, potential intrusions, and insider threats.
• Provide technical expertise in vulnerability management, reporting, and compliance with STIGs, IAVMs, and CCRI readiness requirements.
• Develop, review, and maintain technical documentation including SOPs, POA&Ms, and knowledge-base documentation for ACAS and other operations.
• Collaborate closely with Information System Security Managers (ISSMs), administrators, and DoD leadership to improve cyber defense posture.

Requirements

• Active Secret clearance
• Security+ certification (IAT II)
• 3-5 years related experience
• Hands-on experience with ACAS (Tenable Security Center / Tenable Manager) vulnerability scanning and reporting
• Familiarity with DoD cybersecurity policies, RMF, STIGs, and network environments
• Strong analytical, troubleshooting, and communication skills

Benefits

We offer full-time salaried employees competitive salaries with a range of benefits, including:

• Medical, Dental, & Vision Insurance
• SIMPLE IRA with Company Match
• Paid Federal Holidays
• Vacation & Sick Leave
• Life Insurance, Short-term Disability, Long-term Disability

Equal Opportunity Employer

Enterprise Horizon Consulting Group is an equal opportunity employer. Enterprise Horizon Consulting Group does not discriminate against any employee or applicant for employment on the basis of race, color, religion, sex, marital status, sexual orientation, gender identity, national origin, ancestry, age (40 and over), physical or mental disability, or protected veteran status, or any other protected status in accordance with all applicable federal, state and local laws.