Acas Cybersecurity Jobs

2 jobs found

Today

ACAS Cybersecurity Analyst

Apavo Corporation Oakton, VA

Oakton, VA

Today

Full time Senior Acas Cybersecurity Tools

Apply Now

Job Description

Apavo Corporation is seeking an ACAS Cybersecurity Analyst to join the team onsite in Oakton, VA. This role supports DoD/IC RMF vulnerability management, continuous monitoring, and compliance across multiple enclaves, handling ACAS administration, vulnerability scanning, risk remediation, and upstream reporting. The position emphasizes hands-on administration of security scanning tools within sensitive environments and close collaboration with operations and engineering to maintain a robust cyber posture.

Responsibilities

Advanced ACAS administration: Deploy, configure, and manage Tenable Security Center (Tenable.sc) and Nessus scanners across connected and air-gapped enclaves (NIPR, SIPR, JWICS, SAP).
Vulnerability, R&D & directive scanning: Conduct credentialed and non-credentialed scans, tailor scan zones, profiles, and asset lists to ensure complete visibility while avoiding disruption to delicate research systems. Perform targeted scans to verify system compliance with DCDC CTOs.
Troubleshooting & maintenance: Diagnose and resolve complex scanner connectivity issues, credentialed scan failures (WMI/SSH), and perform manual/offline plugin and feed synchronization for isolated, highly classified networks.
Multi-framework compliance validation: Validate findings against DISA STIGs, CIS benchmarks, and IC/SAP baselines. Use tools such as SCC, STIG Viewer, and Evaluate-STIG for compliance checks.
Risk & remediation tracking: Develop and maintain POA&M documentation; monitor IAVA/IAVM notices and IC-specific vulnerability alerts. Work with operations and engineering to craft risk-based remediation strategies and track mitigations in systems of record (eMASS, Xacta).
Continuous monitoring & upstream reporting: Execute continuous monitoring (ConMon) activities, integrating ACAS outputs with local SIEM (e.g., Splunk) to sustain ongoing authorization and coordinate with the external CSSP. Support upstream enterprise cybersecurity posture reporting with data synchronized to the CMRS system.
DoD & IC RMF support: Support RMF lifecycle activities across DoD RMF (DoDI 8510.01), ICD 503, and JSIG. Maintain artifacts and map scan findings to NIST SP 800-53 and CNSSI 1253 controls.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, or a related field (or equivalent experience).
5–7+ years of DoD/IC cybersecurity experience with a strong focus on vulnerability management and RMF.
Active Top Secret clearance with SCI eligibility.
Willingness to undergo Counterintelligence (CI) or Full-Scope Polygraph for SAP readiness is highly preferred.
DoD 8570.01-M / 8140.03 compliant for IAT Level II (e.g., Security+ CE, CySA+) or Level III (e.g., CASP+, CISSP).
Current DISA ACAS Operator and/or Administrator training certificate.
Extensive, hands-on ACAS experience (Nessus / Tenable.sc), including offline updates, CMRS integration, air-gapped deployments, and credentialed scan troubleshooting.
CE certification (Linux+, Windows Server) or equivalent command-line experience is highly preferred for ACAS host management.
Deep knowledge of DoD RMF (DoDI 8510.01), IC RMF (ICD 503), JSIG, CNSSI 1253, NIST SP 800-53, STIG implementation, and IAVA/IAVM/CTO remediation processes.
Experience with SCC, STIG Viewer, eMASS, Xacta (common in IC/SAP environments), and log aggregation tools (e.g., Splunk).
Strong analytical and problem-solving abilities with the capacity to convey cyber risk to non-technical stakeholders.

Technologies

Tenable.sc, Nessus, ACAS, WMI, SSH
SCC, STIG Viewer, Evaluate-STIG
Splunk, eMASS, Xacta, CMRS
DISA STIGs, CIS benchmarks, NIST SP 800-53, CNSSI 1253
DoD RMF (DoDI 8510.01), ICD 503, JSIG

Other

This role is typical office or administrative work with no exposure to adverse environmental conditions and involves sedentary work.
Apavo Corporation provides equal employment opportunities and prohibits harassment or discrimination based on protected characteristics. Reasonable accommodations under the ADA are available upon request through HR, and employment is at-will.

View full job page →

1mo ago

Senior Cybersecurity Network Defense Administrator (Information Assurance Engineer - Senior)

CGI Group, Inc. Radford, VA

Radford, VA

1mo ago Closed

$128k - $251k/yr Full time Acas Cybersecurity Tools Data Security

This position is no longer accepting applications (closed Jul 4, 2026).

Job Description

Benefits

Competitive compensation
Comprehensive insurance options
Matching contributions through the 401(k) plan and the share purchase plan
Paid time off for vacation, holidays, and sick time
Paid parental leave
Learning opportunities and tuition assistance
Wellness and Well-being programs

Culture and what you can expect

CGI emphasizes ownership, teamwork, respect and belonging. From day one you are invited to contribute as a CGI Partner, helping shape strategy and create value within a collaborative, value-driven environment.

Location: Radford, VA onsite. Salary: USD 127,500 - 251,100 per year.

Position overview

Senior Cybersecurity Network Defense Administrator (Information Assurance Engineer - Senior) supporting the Army PL ALTESS contract, focusing on ACAS management, AESS, PKI, STIGs, PPSM, and eMASS documentation.

Responsibilities

Perform a variety of network defense activities in accordance with established guidelines and best practices.
Manage ACAS infrastructure, configuration, scanning, reporting, and analysis in line with the DISA ACAS Best Practices Guide.
Oversee Army Endpoint Security Solution (AESS) Site Reviewer activities.
Manage DISA Whitelist.
Manage PKI Tokens.
Perform STIG Compliance scanning and reporting.
Provide Ports, Protocols, & Services Management (PPSM) support.
Review proposed configuration changes for security impact.
Handle in-processing and out-processing tasks related to account management functions.
Manage updates to the designated training and certification tracking system.
Participate in SW Assurance reviews to ensure ACAS findings are remediated or documented via eMASS POA&M.

Requirements

Cybersecurity certification (such as Security+, CISSP, or equivalent).
Active DoD Secret Security Clearance.
10+ years of experience in Cybersecurity and Network Defense related areas.
Experience with ACAS management, including infrastructure management, configuration, scanning, reporting, and analysis.
Proficiency in managing Army Endpoint Security Solution (AESS) Site Reviewer activities.
Experience with DISA Whitelist management.
Knowledge of PKI Token management.
Strong understanding of DoD STIGs and ability to perform STIG Compliance scanning and reporting.
Experience providing PPSM support.
Ability to review proposed configuration changes for security impact.
Experience with in-processing and out-processing tasks related to account management functions.

Technologies

ACAS
Army Endpoint Security Solution (AESS) Site Reviewer
DISA Whitelist
PKI Tokens
DoD STIGs
STIG Compliance scanning and reporting
PPSM (Ports, Protocols, & Services Management)
eMASS POA&M
DISA ACAS Best Practices Guide

View full job page →

Get Acas Cybersecurity Jobs alerts

New Acas Cybersecurity Jobs, daily.