Description:
The TS/SCI cleared ACAS Administrator shall support the Client in the design and implementation of Assured Compliance Assessment Solution (ACAS) for the client's networks. The Administrator will train operators and Information Assurance personnel to maintain and operate ACAS tool functionality.
Roles And Responsibilities
- Assess current ACAS implementations for each network and recommend improvements to scanning coverage, architecture, and policy configuration.
- Document the design of the ACAS solution for each network.
- Lead and guide team members in troubleshooting and resolving operational issues within the ACAS environment.
- Develop reporting dashboard designs and reports tailored for three audiences: Leadership; Cybersecurity Staff; and System Administrators.
- Generate, analyze, and present vulnerability assessment reports and risk mitigation updates to and ISSMs/ISSOs.
- Ensure networks receive timely updates from the DISA/DoD Patch Repository or Tenable; implement and track IAVA compliance.
- Implement reporting dashboard designs and generate environment-specific compliance and vulnerability reports.
- Verify scheduled scans achieve required coverage of intended assets and complete successfully; remediate scan failures.
- Maintain Nessus scanner, Nessus Agents, Nessus Network Monitor, and PVS connectivity with the associated Security Center (SC) across Linux and Windows environments.
- Create and manage ACAS organizations, repositories, and scan zones; import, upload, and validate scan results.
- Coordinate with ISSMs, ISSOs, system owners, and administrators to drive vulnerability remediation efforts and track POA&M items.
- Ensure ACAS operations remain compliant with DoD security policies and DISA STIGs.
Basic Qualifications
- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field - or additional years of equivalent hands-on experience will be considered in lieu of a degree.
- Active DoD Top Secret/SCI clearance required.
- Active DoD 8570/8140 IAT Level III or IAM Level II certification: CISA, GSE, SCNA, CISSP (or Associate), CAP, GSLC, or CISM.
- Foundational security certification such as CompTIA Security+ required as a baseline if higher certifications are in progress.
- ACAS official training.
- 3+ years of hands-on ACAS and/or Nessus administration experience in a DoD or federal environment.