Overview
Responsibilities
An Average Day: As the ACAS Administrator II you will be responsible for supporting and maintaining the security posture of a federal environment using ACAS and related security tools. You will focus on conducting vulnerability assessments, assisting with compliance efforts, and collaborating with broader IT and security teams to address potential threats and ensure system integrity. Additionally, in this role you will:
- Conduct routine scans using ACAS (Tenable Security Center, Nessus) to identify vulnerabilities, misconfigurations, and compliance gaps.
- Coordinate with various teams to address findings from vulnerability scans. Track remediation efforts to ensure timely resolution and compliance with relevant federal standards (e.g., DISA STIGs, NIST, RMF).
- Assist in applying and verifying security patches and system hardening measures in accordance with DoD and federal guidelines.
- Ensure the availability, reliability, and accuracy of ACAS components. Troubleshoot and resolve issues related to the Security Center, Nessus scanners, and related plugins.
- Develop and update technical documentation, including configurations, procedures, and standard operating procedures, to maintain a clear security framework.
- Support system migrations and upgrades as needed, helping to minimize downtime and maintain security throughout change processes.
- Participate in incident response actions by leveraging ACAS scans and forensic tools. Contribute to containment, eradication, and recovery efforts under the guidance of senior team members.
- Work with cross-functional teams to update and improve security procedures, ensuring alignment with organizational and regulatory requirements.
- Assist with internal and external audits of information systems, providing evidence of security controls and remediating findings.
- Keep up to date with emerging threats, vulnerabilities, and best practices to maintain a proactive security posture.
Qualifications
- As a requirement of this position, all candidates must be a U.S. Citizen. In accordance with 8 U.S.C. 1324b(a)(2)(C) , we will not consider candidates for this position who do not meet the aforementioned conditions.
- Must hold active DOD Interim Secret or Secret Clearance.
- Must be certified with an IAT Level III Certification such as: CASP, CISSP, CCNP Security, CISA, GCED, GCIH, CCSP. (CASP Preferred)
- Hands-on experience with ACAS Tenable Security Center and Nessus for vulnerability assessment and compliance reporting.
- Basic understanding of system patching, hardening, and backup/recovery solutions (SAN, NAS) in a mid-sized or enterprise environment.
- Familiarity with incident response protocols, including evidence gathering, forensic analysis, and remediation coordination.
- Proven ability to work effectively within cross-functional teams, communicating findings, and coordinating security measures.
- Strong written and verbal communication skills, including experience maintaining documentation of configurations, processes, and procedures.
- Must be able to quickly master new technology / software for the purposes of evaluating or subverting the security functionality of the technology / software.
Pay Transparency StatementAMERICAN SYSTEMS is committed to pay transparency for our applicants and employee-owners. The salary range for this position is USD $100,000.00/Yr. - USD $120,000/Yr. Actual compensation will be determined based on several factors permitted by law. AMERICAN SYSTEMS provides for the welfare of its employees and their dependents through a comprehensive benefits program by offering healthcare benefits, paid leave, retirement plans, insurance programs, and education and training assistance.
