ACAS Administrator - Mid Level

Job description

**About Agile Defense** At Agile Defense we know that action defines the outcome and new challenges require new solutions. That’s why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next. Our vision is to bring adaptive innovation to support our nation's most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility—leveraging a foundation of speed, flexibility, and ingenuity to strengthen and protect our nation’s vital interests. **Requisition #:** 1777 **Job Title:** ACAS Administrator - Mid Level **Location:** On-Site, Quantico, VA **Clearance Level:** Secret, Must Have Clearance to Start **Required Certification(s):** DoD 8570 IAT III or IAM II (CISA, GSE, SCNA, or CISSP [or Associate], CAP, GSLC, CISM); ACAS 6.x certification, must be less than 3yrs old ### Job Description The successful candidate will support the design, implementation, and sustainment of the Assured Compliance Assessment Solution (ACAS) application across the Customer’s Government Enterprise Networks (GEN). This role is responsible for assisting with the deployment, configuration, and operation of ACAS to support enterprise vulnerability management and cybersecurity compliance efforts. The candidate will also provide technical support and guidance to internal and external Information System Security Officers (ISSOs) and Information System Security Managers (ISSMs), troubleshooting ACAS-related issues and ensuring effective use of the platform to maintain the security posture of the enterprise. **Duties and Responsibilities:** - Install, patch, maintain operating systems and ACAS applications while implementing and documenting applicable Defense Information Systems Agency (DISA) Security Technical Implementation Guidelines (STIGs) for all ACAS implementations across supported network environments. - Perform daily administration of the ACAS environment, including managing user accounts, groups, repositories, scan zones, and other system configuration changes to ensure secure and efficient operations. - Assess current ACAS implementations across the Government Enterprise Networks (GEN) and recommend improvements to enhance performance, security, and operational effectiveness. - Ensure GEN networks receive daily plugin and feed updates from the DISA/DoD Patch Repository. - Ensure scheduled vulnerability scans successfully cover 100% of intended assets and troubleshoot failed or incomplete scans. - Provide technical support to internal and external customers experiencing ACAS scanning issues, including troubleshooting credentialed scans. - Maintain connectivity between Nessus Scanners, Passive Vulnerability Scanners (PVS), and the associated Security Center (SC) platform. - Develop, maintain, and update Standard Operating Procedures (SOPs) to support each client ACAS implementation. - Generate and deliver reports, metrics, and other documentation as required to support operational, compliance, and management reporting requirements. ### Education and Background Knowledge and experience with ACAS Security Center, Nessus Vulnerability Scanners and Nessus Agents. Possesses understanding and experience with common cybersecurity toolsets and processes to include STIGs, IAVA Management and Implementation, and Operation Order (OPORD)/Fragmentary Order (FRAGO) support. Experience with virtualized environments (vSphere, ESXI). ### Years of Experience 3+ years ACAS and/or Nessus application management experience ### Required Skills - ACAS Security Center and Nessus experience - Scripting (Nessus Attack Scripting Language (NASL, Python, Bash, Powershell) (preferred) - Good communication and interpersonal skills - Ability to follow policies and procedures - Ability to communicate in a clear speaking voice as well as the ability to respond clearly to questions - Aptitude to address negative situations and resolve them in a positive manner. - Understand the concepts of subnets. ### Working Conditions - General office environment. Work is generally sedentary in nature but may require standing and walking for up to 10% of the time. The working environment is generally favorable. Lighting and temperature are adequate, and there are not hazardous or unpleasant conditions caused by noise, dust, etc. Work is generally performed within an office environment, with standard office equipment available. - Possible off-hours work to support releases and outages - Ability to lift and carry up to 10 pounds, with occasional lifting or carrying of small articles. - Ability to stand occasionally and to walk and sit frequently, as required to perform essential job duties. - Ability to perform tasks that involve manual dexterity, such as handling, reaching, or working with equipment or documents. - Ability to occasionally climb, balance, bend, stoop, kneel, or crawl to access work areas or perform job functions. - Ability to continuously communicate verbally and listen effectively. - Ability to maintain visual acuity continuously in order to operate equipment, read technical information, and use a computer keyboard.