Senior Vulnerability Management, ACAS Response Analyst

Job not on LinkedIn

🔥 0 minutes ago

🌽 Illinois – Remote

🌽 Illinois – Remote

⏰ Full Time

🟠 Senior

🧐 Analyst

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 25%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

DecisionPoint Corporation

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2011

🎖️ Defense

💼 Consulting

📦 Logistics

Defense • Consulting • Logistics

DecisionPoint Corporation is a Service Disabled Veteran Owned Small Business specializing in IT modernization and digital transformation for government agencies. They provide comprehensive services including cybersecurity, health IT, and intelligent automation solutions, aimed at improving operational efficiency and effectiveness while ensuring secure cloud migration. Their Centers of Excellence approach drives mission success by addressing the most pressing challenges faced by government entities through innovative technology and expert support.

📋 Description

• Review and analyze ACAS vulnerability-scan results provided by Government civilian personnel • Validate findings and prioritize vulnerabilities based on severity, exploitability, asset criticality, mission impact, exposure, and applicable Government requirements • Identify affected systems, applications, devices, and organizational owners • Assign and coordinate remediation actions with infrastructure, application, operations, engineering, and Government teams • Establish remediation deadlines and track findings through mitigation, approved exception, risk acceptance, or validated closure • Track compliance with applicable IAVAs and IAVM requirements • Maintain vulnerability records, remediation status, due dates, responsible owners, risk decisions, and supporting evidence • Create and continuously update system- or program-level POA&Ms • Escalate overdue, high-risk, repeatedly identified, or unresolved vulnerabilities • Coordinate Government rescan requests and review rescan results to validate remediation • Document vulnerability closure and retain traceable supporting evidence in the designated Government repository • Identify false positives, duplicate findings, accepted risks, operational dependencies, and remediation constraints for Government review • Review Endpoint Security Solutions reports and coordinate remediation of endpoint-security findings • Monitor vulnerability aging, remediation performance, compliance rates, recurring findings, and risk trends • Develop vulnerability-management reports, metrics, dashboards, risk summaries, and briefing materials • Support reporting of USMEPCOM security compliance • Coordinate emergency or accelerated remediation for critical vulnerabilities and time-sensitive directives • Verify remediation evidence is complete, accurate, and sufficient to support closure • Recommend process improvements to increase remediation efficiency, reduce recurring vulnerabilities, and improve reporting accuracy • Support development and maintenance of vulnerability-management procedures, SOPs, workflows, and user guidance

🎯 Requirements

• Active Secret clearance or higher • Bachelor’s degree in Cybersecurity, Information Systems, or a related field • Minimum of 10 years of relevant cybersecurity, information assurance, vulnerability-management, or information-security experience • Current CompTIA Security+ certification • Current CompTIA Cybersecurity Analyst (CySA+) certification • Experience analyzing ACAS or Tenable vulnerability-scan results in a Department of Defense environment • Experience coordinating vulnerability remediation across infrastructure, network, endpoint, application, database, cloud, and system-administration teams • Knowledge of IAVAs, IAVM requirements, and associated reporting processes • Experience creating and maintaining POA&Ms for cybersecurity vulnerabilities and compliance findings • Experience prioritizing vulnerabilities using severity, exploitability, mission impact, asset criticality, and threat intelligence • Experience coordinating rescans and validating remediation effectiveness using scan results and supporting technical evidence • Familiarity with Endpoint Security Solutions, STIG Viewer, SCAP tools, eMASS, ServiceNow, or comparable cybersecurity and workflow platforms • Knowledge of the DoD Risk Management Framework, NIST SP 800-53 controls, FISMA reporting, DISA Security Technical Implementation Guides, and applicable DoD cybersecurity directives • Experience developing vulnerability metrics, aging reports, remediation dashboards, compliance summaries, and executive-level briefings • Experience documenting false positives, mitigations, operational constraints, accepted risks, and technical closure evidence • Strong analytical, prioritization, documentation, communication, and cross-functional coordination skills • Ability to explain complex vulnerability findings and remediation risks to technical and nontechnical stakeholders