Join our team that owns the vulnerability scanning backbone for a DoD enterprise, designing and running Tenable, Nessus and ACAS across both unclassified and classified networks. You will lead the technical direction of the ACAS capability end to end, from scan policy and architecture through accurate, on time results delivered to the customer. You will also lead a small team of ACAS support engineers and serve as the technical voice to the government client on resource needs, dependencies and risk.

What You Will Do

• Lead the design, engineering, implementation, optimization and management of Tenable, Nessus and ACAS solutions in unclassified and classified DoD environments
• Administer Tenable applications hosted on Red Hat Enterprise Linux, including troubleshooting across the stack
• Develop and maintain scan policies, scan zones and dashboards
• Interpret scan findings and recommend remediation to system owners
• Identify and clearly communicate required ports, protocols and connectivity dependencies
• Configure systems to meet federal requirements, including STIGs, FISMA and FIPS
• Support risk management processes and authorization packages
• Create and maintain standard operating procedures
• Respond to incidents and support scheduled maintenance
• Produce technical, functional and team lead reports
• Manage and train a small team of ACAS support engineers
• Interface directly with the government client on resource needs, technical risk and project progress

Required Qualifications

• 5+ years of related professional experience
• Hands on design, engineering, implementation and administration of Tenable, Nessus or ACAS
• Strong Red Hat Enterprise Linux system administration and troubleshooting
• Working knowledge of networking concepts, including ports, protocols and connectivity dependencies
• Building and maintaining scan policies, zones and dashboards, and interpreting the findings
• Configuring systems to STIG, FISMA and FIPS requirements
• Leading a small technical team and training junior engineers
• Direct communication with a government customer on technical status, dependencies and risk
• Active DoD Secret clearance (U.S. citizenship required)
• DoD 8570 IAT II certification, such as Security+

Preferred Qualifications

• Complex DoD security architectures
• Risk management framework processes and authorization packages
• Writing and maintaining SOPs for a scanning enterprise
• Incident response and maintenance support in a classified environment