[Hiring] Vulnerability Management / ACAS Analyst @DecisionPoint | Cortek

Role Description

DecisionPoint seeks a Journeyman Vulnerability Management / ACAS Analyst to support vulnerability tracking, remediation coordination, and cybersecurity compliance reporting for the USMEPCOM ENLIST program. The Vulnerability Management / ACAS Analyst will:

• Review ACAS findings provided by Government personnel.
• Reconcile affected systems and devices with inventory records.
• Coordinate corrective actions with responsible administrators.
• Track remediation tickets, dependencies, deadlines, POA&M updates, and supporting evidence through resolution.
• Coordinate Government rescans and maintain accurate vulnerability status information for operational reporting, compliance reviews, and cybersecurity inspections.

This position is remote, with a preference for candidates located in the Chicago area.

Note: By applying to this position, you acknowledge and consent to having your resume included in an active competitive government contract bid.

Qualifications

• Active Secret clearance or higher.
• Bachelor’s degree in Cybersecurity, Information Systems, or a related field.
• Minimum of 7 years of relevant cybersecurity, information assurance, vulnerability-management, or information-security experience.
• Current CompTIA Security+ certification.

Requirements

• CompTIA Cybersecurity Analyst (CySA+) certification (preferred).
• Experience reviewing ACAS or Tenable vulnerability-scan results in a Department of Defense environment (preferred).
• Experience reconciling vulnerability findings against hardware, software, configuration-management, or asset-inventory records (preferred).
• Experience coordinating vulnerability remediation with system administrators, infrastructure teams, and application support teams (preferred).
• Knowledge of Information Assurance Vulnerability Alerts and Information Assurance Vulnerability Management requirements (preferred).
• Experience creating and maintaining cybersecurity POA&Ms (preferred).
• Experience using ServiceNow or another ticketing and workflow-management platform to track remediation activities (preferred).
• Familiarity with Endpoint Security Solutions, STIG Viewer, SCAP tools, eMASS, or comparable DoD cybersecurity technologies (preferred).
• Knowledge of the DoD Risk Management Framework, NIST SP 800-53 controls, DISA Security Technical Implementation Guides, and applicable DoD cybersecurity directives (preferred).
• Experience collecting, reviewing, and maintaining technical evidence supporting vulnerability remediation and closure (preferred).
• Experience coordinating rescans and reviewing results to verify successful remediation (preferred).
• Experience preparing vulnerability reports, remediation metrics, aging summaries, dashboards, or inspection-support materials (preferred).
• Familiarity with current DoD 8140 cybersecurity workforce qualification requirements (preferred).
• Strong analytical, organizational, documentation, communication, and follow-through skills.
• Ability to manage multiple findings, owners, dependencies, and deadlines in a structured compliance environment.

Company Description

DecisionPoint Corporation is an Equal Employment Opportunity and Affirmative Action employer. It is the policy of DecisionPoint Corporation to provide equal employment opportunity in accordance with all applicable Equal Employment Opportunity/Affirmative Action laws, directives and regulations to all employees and qualified applicants without regard to race, ethnicity, color, religion, national origin, sex, age, disability status, pregnancy, sexual orientation, gender identity, genetic information, protected veteran status, or any other protected status under Federal, State or Local laws.

In accordance with Presidential Executive Order 13665, DecisionPoint Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.

By expressing your interest and submitting your resume for this position, you authorize DecisionPoint Corporation to share your resume, as well as personal information included on the resume, with its subsidiaries, affiliates and teaming partners for the purpose of considering you for this position and other available positions requiring comparable skills, education and experience.