POSITION SUMMARY: This position serves as a member of the Tenable ACAS team responsible for operating and maintaining the Joint Service Provider’s Assured Compliance Assessment Solution (ACAS) program. This position supports timely and accurate scanning and reporting per JSP and DoD policies and orders. Activities that this position will execute include deploying, configuring, operating, monitoring, tuning, upgrading, and troubleshooting Tenable components spanning a large and complex environment. PRIMARY RESPONSIBILITIES: Serve as an integral member of a team of Tenable specialists supporting various organizations across the National Capital Region
Complete the following key functions for Tenable deployments across JSP’s area of responsibility:
Install updates to Tenable software as released and in compliance with STIG requirements
Deploy, maintain, and tune Tenable scanners to meet current and future needs
Create, deploy, and manage Tenable scan configurations
Conduct scans and provide reporting to the JSP DCO leadership as well as scanned organizations
Ensure that the ACAS scanners and Security Center are operational and reporting properly
Assist customers in resolving ACAS issues
Perform monthly vulnerability scans and create repositories, queries, and dashboards as necessary to ensure vulnerability report information is available
Investigate false positives or potentially confusing scan data results
Develop tracking mechanism for false positives and track false positives until the finding is corrected; provide results upon resolution BASIC QUALIFICATIONS: Bachelor's degree and 4+ years of prior IT experience with experience working with Tenable Security Center and Tenable Nessus agents within the DoD environment. Additional work experience or Cyber courses/certifications may be substituted in lieu of degree.
DoD 8570 IAT II
Windows Server 2012 or 2016 experience and certification
Experience with multiple network security zones, subnetting, VRFs, and VLANs
Motivated self-starter with strong written and verbal communication skills, and the ability to create complex technical reports on analytic finding.
Demonstrated analytical and troubleshooting skills.
Must be a US Citizen.
Must hold a Secret clearance with TS/SCI eligibility preferred PREFERRED QUALIFICATIONS: Cybersecurity experience (Protect, Detect, Respond and Sustain) within a Computer Incident Response organization.
Understanding of the life cycle of cybersecurity threats, attacks, attack vectors and methods of exploitation with an understanding of intrusion set tactics, techniques and procedures (TTPs).
Experience with malware analysis concepts and methods.
Motivated self-starter with strong written and verbal communication skills, and the ability to create complex technical reports on analytic findings.
Familiarity or experience in Intelligence Driven Defense, Cyber Kill Chain methodology, and/or MITRE ATT&CK framework. About JCS Solutions LLC: JCS Solutions LLC is an IT Government Contracting company dedicated to providing the highest quality of services and solutions. Our employees enjoy a work culture that promotes innovation. JCS Solutions LLC benefits include 401k retirement plans, paid time off, health insurance, dental insurance, vision insurance, life insurance, long term disability, short term disability, and opportunities for professional development. It is JCS’s policy to promote equal employment opportunities. All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law.