Description
\t\t\t\t\t•\tAdminister and maintain Assured Compliance Assessment Solution (ACAS) scanning for the information assurance team in accordance with STIG/SRG guidance, applicable Taskords, and best security practices•\tEvaluate information systems for compliance with Defense Information Security Agency (DISA) Security Technical Implementation Guidelines (STIGs) and the Common Vulnerabilities and Exposures (CVE) repository•\tNavigate systems through the authorization process, prepare packages for government review, and maintain compliance through change management•\tTranslate security requirements into technical tasks and work with the engineering teams to verify the measures needed to bring systems and laboratories into compliance•\tEnsure that all systems are patched and report any problems in achieving compliance to the Information System Security Officer (ISSO)•\tDocumentation and compliance are vital, requiring the creation and maintenance of security documentation, including ATO packages and ensuring the integration of security solutions•\tCreate and update the Plan of Action and Milestones (POA&M) to document all known vulnerabilities. Work with the engineering team to determine remediation or mitigation actions and timelines
\t\t\t\t\tSkills
\t\t\t\t\tCyber, emass, stigs, acas, RMF, ATO, Nessus, Nist, Security+
\t\t\t\t\tTop Skills Details
\t\t\t\t\tCyber,emass,stigs,acas,RMF,ATO,Nessus,Nist,Security+
\t\t\t\t\tAdditional Skills & Qualifications
\t\t\t\t\tCandidates must have an active CAC. The Army can not issue new CAC's until the new Fiscal Year, so they can't consider candidates without one.3+ years of general information technology experience2+ year of directly applicable ACAS experienceKnowledge of cybersecurity policies and guidelines (NIST SP 800-53, DoD Instruction 8510.01), a strong understanding of security controls, vulnerability management, and risk assessment methodologiesHands-on experience utilizing DoD-approved scanning/testing tools (Nessus, STIG Checker, SCAP, etc.) and performing analysis of outputExperience with DoD cyber security applications (ACAS, HBSS, SCC)Experience with DoD cybersecurity requirements, NIST standards, vulnerability and compliance assessments, and the NIST RMFA BA or BS degree n a relevant field such as Cybersecurity, Computer Science, or Information Technology is required. An Associates degree and 7 years of experience or a total of 9 years of total experience may be substituted for the BA/BS degreeActive Top Secret ClearanceSecurity + certifications; with ability to obtain Linux+ certificationFamiliarity with security control assessments, STIG Viewer and Secure Content Automation Protocol (SCAP) checklists or benchmarks desired
\t\t\t\t\tExperience Level
\t\t\t\t\tIntermediate Level
Pay and Benefits
The pay range for this position is $120000.00 - $155000.00/yr.
Qualifying Qualifying Qualifying Qualifying Qualifying Qualifying Qualifying Qualifying
Workplace Type
This is a fully onsite position in Havre De Grace,MD.
Application Deadline
This position is anticipated to close on Jul 22, 2025.
About Actalent
Actalent is a global leader in engineering and sciences services and talent solutions. We help visionary companies advance their engineering and science initiatives through access to specialized experts who drive scale, innovation and speed to market. With a network of almost 30,000 consultants and more than 4,500 clients across the U.S., Canada, Asia and Europe, Actalent serves many of the Fortune 500.
The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.
If you would like to request a reasonable accommodation, such as the modification or adjustment of the job application process or interviewing due to a disability, please email actalentaccommodation@actalentservices.com for other accommodation options.