Vulnerability Management, ACAS Analyst – Journeyman

Job not on LinkedIn

🔥 1 minute ago

🌽 Illinois – Remote

🌽 Illinois – Remote

⏰ Full Time

🟠 Senior

🔴 Lead

🧐 Analyst

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 25%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

DecisionPoint Corporation

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2011

🎖️ Defense

💼 Consulting

📦 Logistics

Defense • Consulting • Logistics

DecisionPoint Corporation is a Service Disabled Veteran Owned Small Business specializing in IT modernization and digital transformation for government agencies. They provide comprehensive services including cybersecurity, health IT, and intelligent automation solutions, aimed at improving operational efficiency and effectiveness while ensuring secure cloud migration. Their Centers of Excellence approach drives mission success by addressing the most pressing challenges faced by government entities through innovative technology and expert support.

📋 Description

• Review ACAS vulnerability findings provided by Government personnel • Analyze findings to identify affected assets, systems, applications, devices, and responsible support teams • Reconcile affected assets against configuration-management, inventory, and asset-management records • Research discrepancies between ACAS results and authoritative asset inventories • Support vulnerability prioritization based on severity, asset criticality, mission impact, remediation deadlines, and Government direction • Coordinate corrective actions with system administrators, infrastructure teams, application teams, engineers, and other remediation owners • Create, update, and monitor vulnerability-remediation tickets • Track owners, corrective actions, technical dependencies, target completion dates, and remediation status • Follow up with responsible personnel regarding status updates and remediation delays • Collect and review technical documentation, screenshots, configuration results, ticket records, and other remediation evidence • Coordinate Government rescan requests and review rescan results to verify remediation • Document validated closures and retain supporting evidence in the designated Government repository • Track compliance with Information Assurance Vulnerability Alerts and Information Assurance Vulnerability Management requirements • Create and update POA&M entries for vulnerabilities requiring formal corrective-action tracking • Maintain vulnerability status information for reports, dashboards, compliance reviews, and cybersecurity inspections • Identify and escalate overdue, high-risk, recurring, or unresolved findings • Track remediation dependencies involving patch availability, configuration changes, application testing, maintenance windows, or operational constraints • Assist with documenting false positives, mitigating controls, operational dependencies, and Government-approved risk decisions • Support review of Endpoint Security Solutions reports and endpoint-security findings • Develop vulnerability aging reports, remediation summaries, compliance metrics, and briefing materials • Identify recurring vulnerabilities, process gaps, inaccurate asset records, and workflow-improvement opportunities • Support maintenance of vulnerability-management procedures, SOPs, tracking tools, and reporting templates

🎯 Requirements

• Active Secret clearance or higher • Bachelor’s degree in Cybersecurity, Information Systems, or a related field • Minimum of 7 years of relevant cybersecurity, information assurance, vulnerability-management, or information-security experience • Current CompTIA Security+ certification • CompTIA Cybersecurity Analyst (CySA+) certification preferred • Experience reviewing ACAS or Tenable vulnerability-scan results in a Department of Defense environment preferred • Experience reconciling vulnerability findings against hardware, software, configuration-management, or asset-inventory records preferred • Experience coordinating vulnerability remediation with system administrators, infrastructure teams, and application support teams preferred • Knowledge of Information Assurance Vulnerability Alerts and Information Assurance Vulnerability Management requirements preferred • Experience creating and maintaining cybersecurity POA&Ms preferred • Experience using ServiceNow or another ticketing and workflow-management platform preferred • Familiarity with Endpoint Security Solutions, STIG Viewer, SCAP tools, eMASS, or comparable DoD cybersecurity technologies preferred • Knowledge of the DoD Risk Management Framework, NIST SP 800-53 controls, DISA Security Technical Implementation Guides, and applicable DoD cybersecurity directives preferred • Experience collecting, reviewing, and maintaining technical evidence supporting vulnerability remediation and closure preferred • Experience coordinating rescans and reviewing results to verify successful remediation preferred • Experience preparing vulnerability reports, remediation metrics, aging summaries, dashboards, or inspection-support materials preferred • Familiarity with current DoD 8140 cybersecurity workforce qualification requirements preferred • Strong analytical, organizational, documentation, communication, and follow-through skills • Ability to manage multiple findings, owners, dependencies, and deadlines in a structured compliance environment

🏖️ Benefits

• Active Secret clearance or higher is required for the role • Opportunity to support a USMEPCOM ENLIST government contract program • Remote work arrangement • Resume may be considered for this position and other comparable positions through DecisionPoint subsidiaries, affiliates, and teaming partners