[Hiring] Senior Vulnerability Management / ACAS Response Analyst @DecisionPoint

Role Description

DecisionPoint seeks a Senior Vulnerability Management / ACAS Response Analyst to support vulnerability identification, prioritization, remediation coordination, and compliance reporting for the USMEPCOM ENLIST program. The Vulnerability Management / ACAS Response Analyst will:

• Analyze Assured Compliance Assessment Solution (ACAS) results provided by Government personnel.
• Assess and prioritize findings, and coordinate remediation activities across infrastructure and application teams.
• Track remediation owners, corrective actions, deadlines, and supporting evidence through closure.
• Track Information Assurance Vulnerability Alert (IAVA) and Information Assurance Vulnerability Management (IAVM) compliance.
• Maintain Plans of Action and Milestones (POA&Ms).
• Escalate unresolved vulnerabilities and coordinate Government rescans.
• Review rescan results to validate and document closure.

This position is remote, with a preference for candidates located in the Chicago area.

Note: By applying to this position, you acknowledge and consent to having your resume included in an active competitive government contract bid.

Qualifications

• Active Secret clearance or higher.
• Bachelor’s degree in Cybersecurity, Information Systems, or a related field.
• Minimum of 10 years of relevant cybersecurity, information assurance, vulnerability-management, or information-security experience.
• Current CompTIA Security+ certification.
• Current CompTIA Cybersecurity Analyst (CySA+) certification.

Requirements

• Experience analyzing ACAS or Tenable vulnerability-scan results in a Department of Defense environment.
• Experience coordinating vulnerability remediation across infrastructure, network, endpoint, application, database, cloud, and system-administration teams.
• Knowledge of IAVAs, IAVM requirements, and associated reporting processes.
• Experience creating and maintaining POA&Ms for cybersecurity vulnerabilities and compliance findings.
• Experience prioritizing vulnerabilities using severity, exploitability, mission impact, asset criticality, and threat intelligence.
• Experience coordinating rescans and validating remediation effectiveness using scan results and supporting technical evidence.
• Familiarity with Endpoint Security Solutions, STIG Viewer, SCAP tools, eMASS, ServiceNow, or comparable cybersecurity and workflow platforms.
• Knowledge of the DoD Risk Management Framework, NIST SP 800-53 controls, FISMA reporting, DISA Security Technical Implementation Guides, and applicable DoD cybersecurity directives.
• Experience developing vulnerability metrics, aging reports, remediation dashboards, compliance summaries, and executive-level briefings.
• Experience documenting false positives, mitigations, operational constraints, accepted risks, and technical closure evidence.
• Additional certifications such as CASP+, CISSP, CISM, CGRC, PenTest+, or equivalent cybersecurity credentials.
• Familiarity with current DoD 8140 cybersecurity workforce qualification requirements.
• Strong analytical, prioritization, documentation, communication, and cross-functional coordination skills.
• Ability to explain complex vulnerability findings and remediation risks to technical and nontechnical stakeholders.

Company Description

DecisionPoint Corporation is an Equal Employment Opportunity and Affirmative Action employer. It is the policy of DecisionPoint Corporation to provide equal employment opportunity in accordance with all applicable Equal Employment Opportunity/Affirmative Action laws, directives and regulations to all employees and qualified applicants without regard to race, ethnicity, color, religion, national origin, sex, age, disability status, pregnancy, sexual orientation, gender identity, genetic information, protected veteran status, or any other protected status under Federal, State or Local laws.

In accordance with Presidential Executive Order 13665, DecisionPoint Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.

By expressing your interest and submitting your resume for this position, you authorize DecisionPoint Corporation to share your resume, as well as personal information included on the resume, with its subsidiaries, affiliates and teaming partners for the purpose of considering you for this position and other available positions requiring comparable skills, education and experience.