Oversee the administration, maintenance, and sustainment of the ACAS solution
Lead and guide the team in troubleshooting and resolving operational issues within the ACAS environment
Maintain and configure Nessus, Nessus Manager, Nessus Agents, Nessus Network Monitor, and Security Center across Linux/Unix and Windows environments
Direct the technical workflow of the ACAS Operations ticket queue, ensuring efficient prioritization, assignment, and resolution
Lead special projects focused on improving and optimizing the ACAS environment
Mentor and support the technical development of the ACAS scanning team to enhance their capabilities and operational effectiveness
Ensure ACAS operations remain compliant with organizational security policies and industry best practices
Develop and implement strategies to optimize scanning processes and improve overall vulnerability management
Collaborate with cross-functional teams to address security findings and drive remediation efforts
Generate, analyze, and present vulnerability assessment reports and risk mitigation updates to stakeholders
Requirements
Must have a Secret Clearance
12+ Years of relevant experience (Bachelor’s Degree in relevant field may be substituted for 5 years of relevant experience).
Required DoD 8140 compliant certification such as CompTIA Security+
Other relevant cybersecurity certifications like Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM), are a plus.
Proven experience as a Nessus-Tenable Security Administrator or in a similar role, with hands-on experience in managing security tools.
In-depth knowledge of the following security technologies: Nessus Tenable (ACAS), Microsoft Defender for Endpoint, and STIG Management.
Familiarity with network and system security principles, protocols, and configurations.
Strong analytical and problem-solving skills to troubleshoot and resolve complex security tool issues.
Excellent communication and collaboration skills to work effectively with cross-functional teams.
Understanding of industry compliance standards (e.g., NIST) and relevant regulations (e.g., GDPR, HIPAA) is advantageous.
Willingness to stay updated with the latest cybersecurity trends and emerging security tools.