A Vulnerability Analyst or Penetration Tester probes for and exploits security vulnerabilities in web-based applications, networks and systems. Penetration Tests are designed to achieve a specific, attacker-simulated goal and should be requested by customers who are already at their desired security posture. A typical goal could be to access the contents of the prized customer database on the internal network, or to modify a record in an HR system. Vulnerability Assessments are designed to yield a prioritized list of vulnerabilities and are generally for clients who already understand they are not where they want to be in terms of security. The customer already knows they have issues and simply need help identifying and prioritizing them.
Norfolk, VA Job Details Full-time 5 hours ago Qualifications Test scanning software Vulnerability scanning implementation Tooling Windows DoD experience Nessus Network scanners Vulnerability management IP networking Linux IAT IAT Level II Vuls Tenable Security Center Full Job Description MANTECH seeks a motivated, career and customer-oriented Assured Compliance Assessment Solution (ACAS) Engineer to join our team onsite in Norfolk, VA. Responsibilities include but are not limited to: Administer, operate, and maintain Tenable Security Center and Nessus scanners in support of continuous monitoring and vulnerability assessment efforts Utilize Vulnerability Remediation Asset Manager (VRAM) to track, manage, and report on vulnerability findings in coordination with ACAS outputs Analyze scan results, validate findings, and collaborate with system owners on remediation plans Create custom dashboards, queries, and reports to support compliance and risk visibility Maintain and update ACAS tool configurations, plugins, and scan policies in accordance with DoD STIGs, DoD ACAS Best Practice Guide, and Navy Scanning Guidance Support vulnerability reporting to Continuous Monitoring and Risk Scoring (CMRS) platforms Troubleshoot scan failures and system connectivity issues across R D environments Support coordination with internal and external stakeholders, including ISSM, ISSOs, CITO, CONMON manager, A&A manager, and RMF SMEs Implement software updates, patches, and configuration changes in compliance with cybersecurity guidance Maintain documentation for system configuration, scan schedules, processes, and issue resolution
Minimum Qualifications:
Associate's degree in Computer Science, Information Technology, or a related field and +5 years of experience in Cybersecurity, Network Administration, or High School Diploma or equivalent and 7+ years of relevant experience in lieu of degree. Hands-on experience using ACAS tools (Tenable Security Center, Nessus) Must have IAT Level II certification (e.g., Security+ CE) Must have
DISA ACAS
Operator and Supervisor Course certificate Experience or knowledge of DoD cybersecurity policies, RMF process, and DISA STIGs Proficient level understanding of TCP/IP, Windows and Linux environments, and system hardening principles
Clearance Requirements:
US Citizenship required and an active Secret clearance with the ability to obtain
TS/SCI Physical Requirements:
Must be able to remain in a stationary position 50% Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine and computer printer The person in this position needs to occasionally move about inside the office to access file cabinets, office machinery, etc.
