Leidos is seeking an Vulnerability Management & ACAS Administrator to support large-scale operations on a high-profile Department of War contract in Fort Belvoir, VA . The I3TS program provides enterprise-wide IT support to enable the Defense Threat Reduction Agency’s Information Management & Technology Directorate to consolidate, modernize, and continuously improve delivery of IT services and mission capabilities to internal and external mission partners operating in CONUS and OCONUS locations.
The selected candidate will serve as the primary ACAS subject-matter expert and technical lead for the program’s vulnerability scanning capability across NIPRNet, SIPRNet, and the Joint Worldwide Intelligence Communications System (JWICS). This position requires an experienced, independent professional who can oversee day-to-day ACAS operations, maintain scanner health and coverage, analyze findings, produce actionable reporting, and coordinate remediation activities with system owners and technical teams.
Primary Responsibilities:
Serve as the primary technical lead and subject-matter expert for Assured Compliance Assessment Solution (ACAS) and Nessus vulnerability-scanning operations across NIPRNet, SIPRNet, and JWICS environments.
Administer, operate, maintain, and troubleshoot ACAS/Nessus infrastructure, including scanners, scan configurations, scan schedules, policies, plugins, credentials, and associated management components.
Ensure ACAS scanning capability, asset coverage, scanner health, and vulnerability-data quality are maintained across all supported environments.
Plan, coordinate, and execute authenticated and unauthenticated vulnerability scans in accordance with approved schedules, operational requirements, and maintenance windows.
Analyze scan results; validate findings; identify false positives, duplicate findings, and scan-quality issues; and assess the potential impact to supported systems and mission operations.
Prioritize vulnerabilities based on severity, operational impact, exploitability, asset criticality, and applicable remediation timelines.
Coordinate with system administrators, network engineers, endpoint-security personnel, and system owners to facilitate vulnerability remediation and verify closure.
Track vulnerabilities, remediation actions, exceptions, findings, and status in approved tracking systems.
Develop and maintain vulnerability-management metrics, dashboards, trend analysis, and recurring reports for technical personnel, program leadership, and customer stakeholders.
Identify and resolve ACAS coverage gaps, credentialed-scan failures, connectivity issues, scanner performance issues, and asset-inventory discrepancies.
Support Security Technical Implementation Guide (STIG) compliance activities by correlating ACAS findings with hardening requirements and remediation actions.
Develop and maintain ACAS standard operating procedures, operating instructions, scan procedures, troubleshooting guides, and knowledge articles.
Coordinate ACAS maintenance, upgrades, configuration changes, and technical support activities with applicable infrastructure, network, endpoint, and cybersecurity teams.
Provide technical guidance to leadership and stakeholders on ACAS capabilities, vulnerability trends, remediation priorities, and operational risk.
Work independently to manage competing requirements and meet short-, mid-, and long-term vulnerability-remediation timelines.
Basic Qualifications:
Bachelor’s degree and 7+ years of relevant cybersecurity, vulnerability management, systems administration, or information assurance experience; or additional relevant experience in lieu of a degree.
At least 7 years of hands-on experience serving as an ACAS/Nessus subject-matter expert in a large enterprise or Department of War environment.
Demonstrated experience administering and operating ACAS/Nessus infrastructure, including scanner deployment, configuration, health monitoring, scan-policy administration, plugin…