USAF - ACAS Engineer (Cybersecurity)

Location: On-site in Linthicum Heights, Maryland, United States. Vulnerability reporting is due by 5 p.m. Eastern Time every Friday.

Company

Supports a United States Air Force program for the Defense Cyber Crime Center.

What you will do

• Configure, operate, and maintain ACAS and other government-approved enterprise vulnerability scanning capabilities.
• Perform weekly credentialed vulnerability scans across DC3 networks, applications, IT assets, and operational technology assets.
• Maintain scan scope and asset coverage records, troubleshoot failed scans and authentication issues, and improve scanning coverage.
• Analyze findings, investigate false positives, prioritize vulnerabilities, and coordinate patching and secure configuration changes.
• Prepare the CORA-scored Vulnerability Report and track remediation through follow-up scans and closure verification.
• Support continuous monitoring, CI/CD vulnerability management, Infrastructure as Code and Configuration as Code reviews, RMF assessments, ATO activities, and incident response coordination.

Requirements

• Active TS/SCI clearance required.
• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Experience administering ACAS or comparable enterprise vulnerability assessment tools, including scan scheduling, credentialed scanning, and reporting.
• Experience diagnosing scan failures, validating findings, assessing coverage, and verifying remediation.
• Working knowledge of enterprise networks, server operating systems, applications, virtual infrastructure, and cloud or hybrid environments.
• Ability to coordinate remediation, maintain assessment records, and provide clear technical evidence for cybersecurity compliance activities.

Culture & Benefits

• Work directly with systems administrators, engineers, system owners, cybersecurity personnel, and NOC/SOC teams.
• Contribute to security posture reporting and government-directed security requirements.
• Support enterprise scanning engine deployment for Initial Operational Capability and continued NOC/SOC sustainment.