ACAS Vulnerability Admin - Agile Defense

Quantico, VA 22134

About the Job

Requisition #: ACASV003412

Job Title: ACAS Vulnerability Admin

Location: Quantico, VA 22134

Clearance Level: Active DoD - Secret

Required Certification(s):

DoD 8570 IAT III or IAM II (CISA, GSE, SCNA, or CISSP [or Associate], CAP, GSLC, CISM)

**Selected applicants may be subject to a government security investigation and must meet eligibility requirements for access to classified information. **

SUMMARY

The successful candidate will support the Customer in the design and implementation of Assured Compliance Assessment Solution (ACAS) for the Customer’s Government Enterprise Networks (GEN), training operators from outside the organization and internal Information Assurance personnel to maintain and operate the ACAS tool functionality, and operate and maintain the ACAS solution, to support network and appliance scanning and configuration assessments.

DUTIES

Rack and provision government furnished equipment (servers), install and patch operating systems, application, and document Department Information Systems Agency (DISA) Security Technical Implementation Guidelines (STIGs) applicable to each network environment for all ACAS implementations.
Assesses current ACAS implementations for each of the GEN networks and recommend changes.
Documents the steps required to design the ACAS solution for each of the GEN networks to include IP address, Fully Qualified Domain Name, and physical location of each component.
Creates network diagrams of the designs with Microsoft Visio (include list of hardware and software requirements).
Creates reporting dashboard designs and reports for each environment that are specific to the following audiences: Leadership & Executives; Cybersecurity Staff; and System Administrators.
Ensures GEN networks receive periodic updates from either the DISA/DoD Patch Repository or Tenable.
Implements the Reporting Dashboard designs and use reporting tool to create reports.
Ensures scheduled scans are covering 100% of intended assets and are being run successfully.
Maintains the Nessus scanners and Passive Vulnerability Scanner’s (PVS) connectivity with the associated Security Center (SC).
Develop and/or update the Standard Operating Procedures (SOP) to support each of the client ACAS solutions documented within the SharePoint portal.
Provide reports as necessary.

Qualifications

Education and Certifications

DoD 8570 IAT III or IAM II (CISA, GSE, SCNA, or CISSP [or Associate], CAP, GSLC, CISM)

Background Needed and Years of Experience

4+ years ACAS and/or Nessus experience • 3+ years’ experience in supporting, configuring, administering Linux
3+ (RHEL) operating system in an enterprise environment
Experience with virtualized environments (vSphere, ESXI)

Additional Skills & Qualifications

Must Have Technical Skills

ACAS Operating System experience
Red Hat Enterprise Linux (RHEL) experience (preferred)
Scripting (Nessus Attack Scripting Language (NASL), Python, Bash) (preferred)

Preferred Technical Skills

Knowledge and experience with ACAS SC, Nessus Vulnerability Scanners (NVS), and RHEL.

Working Conditions

Working Conditions

Contractor site with 0%-10% travel possible. Possible off-hours work to support releases and outages.
General office environment.
Work is generally sedentary in nature, but may require standing and walking for up to 10% of the time.
The working environment is generally favorable.
Lighting and temperature are adequate, and there are not hazardous or unpleasant conditions caused by noise, dust, etc.
Work is generally performed within an office environment, with standard office equipment available.

Strength Demands

Light – 20 lbs.
Maximum lifting with frequent lift/carry up to 10 lbs.
A job is light if less lifting is involved but significant walking/standing is done or if done mostly sitting but requires push/pull on arm or leg controls.

Physical Requirements

Stand or Sit
Walk
Repetitive Motion
Use Hands / Fingers to Handle or Feel
Stoop, Kneel, Crouch, or Crawl
Talk or Hear
See
Push or Pull
Climb (stairs, ladders) or Balance (ascend / descend, work atop, traverse)

COVID-19 Vaccination Requirements

As a federal contractor, Agile Defense is subject to any federal vaccine mandates or other customer/facility vaccination requirements. As such, to protect the health and safety of its employees and to comply with customer requirements, Agile Defense may require employees in certain positions to be fully vaccinated against COVID-19. Vaccination requirements will depend on the status of the federal contractor mandate and customer site requirements.

About Us!

Agile Defense is an Information Technology Solutions provider committed to partnering with our customers to deliver the highest level of service to our customers. We provided Information Technology (IT) services to the U.S. Government, including several United States Civil agencies and various branches within the U.S. Department of Defense.

Agile Defense has established a solid reputation of partnering with our customers to deliver innovative IT solutions with our “Listen. Think. Innovate.” philosophy.

At Agile Defense, we know that our employees are our most important asset. We believe in our responsibility to our fellow employees, customers, company, and to our country. We promote teamwork, integrity, and creativity; we expect our fellow employees to also live these values.

Equal Opportunity Employer/Protected Veterans/Individuals with DisabilitiesThe contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. 41 CFR 60-1.35(c)

Source : Agile Defense