ACAS Administrator - Mid Level

The successful candidate will support the design, implementation, and sustainment of the Assured Compliance Assessment Solution (ACAS) application across the Customer’s Government Enterprise Networks (GEN). This role is responsible for assisting with the deployment, configuration, and operation of ACAS to support enterprise vulnerability management and cybersecurity compliance efforts. The candidate will also provide technical support and guidance to internal and external Information System Security Officers (ISSOs) and Information System Security Managers (ISSMs), troubleshooting ACAS-related issues and ensuring effective use of the platform to maintain the security posture of the enterprise.

Responsibilities

Support the design, implementation, and sustainment of the Assured Compliance Assessment Solution (ACAS) application across the Customer’s Government Enterprise Networks (GEN); Assist with the deployment, configuration, and operation of ACAS to support enterprise vulnerability management and cybersecurity compliance efforts; Provide technical support and guidance to internal and external Information System Security Officers (ISSOs) and Information System Security Managers (ISSMs), troubleshooting ACAS-related issues and ensuring effective use of the platform to maintain the security posture of the enterprise; Install, patch, maintain operating systems and ACAS applications while implementing and documenting applicable Defense Information Systems Agency (DISA) Security Technical Implementation Guidelines (STIGs) for all ACAS implementations across supported network environments; Perform daily administration of the ACAS environment, including managing user accounts, groups, repositories, scan zones, and other system configuration changes to ensure secure and efficient operations; Assess current ACAS implementations across the Government Enterprise Networks (GEN) and recommend improvements to enhance performance, security, and operational effectiveness; Ensure GEN networks receive daily plugin and feed updates from the DISA/DoD Patch Repository; Ensure scheduled vulnerability scans successfully cover 100% of intended assets and troubleshoot failed or incomplete scans; Provide technical support to internal and external customers experiencing ACAS scanning issues, including troubleshooting credentialed scans; Maintain connectivity between Nessus Scanners, Passive Vulnerability Scanners (PVS), and the associated Security Center (SC) platform; Develop, maintain, and update Standard Operating Procedures (SOPs) to support each client ACAS implementation; Generate and deliver reports, metrics, and other documentation as required to support operational, compliance, and management reporting requirements

Requirements

Knowledge and experience with ACAS Security Center, Nessus Vulnerability Scanners and Nessus Agents; Understanding and experience with common cybersecurity toolsets and processes to include STIGs, IAVA Management and Implementation, and Operation Order (OPORD)/Fragmentary Order (FRAGO) support; Experience with virtualized environments (vSphere, ESXI); 3+ years ACAS and/or Nessus application management experience; ACAS Security Center and Nessus experience; Good communication and interpersonal skills; Ability to follow policies and procedures; Ability to communicate in a clear speaking voice as well as the ability to respond clearly to questions; Aptitude to address negative situations and resolve them in a positive manner; Understand the concepts of subnets

Nice to have

Scripting (Nessus Attack Scripting Language (NASL, Python, Bash, Powershell) (preferred)