Senior Cyber Operations Analyst (Cybersecurity)

Location: Hybrid at the Fairfax, VA office, with up to 3 onsite days per week; additional onsite support may be required based on operational or mission needs. U.S. citizenship required.

Salary: $170,000–$190,000

Company

hirify.global operates a cybersecurity program supporting a newly established DISA AWS environment handling CUI.

What you will do

• Serve as the operational subject matter expert for ACAS vulnerability management and endpoint security operations.
• Configure and operate ACAS scans, targets, credentials, schedules, plugins, and vulnerability reporting.
• Administer Trellix, ePolicy Orchestrator, Microsoft Defender, or similar endpoint security platforms, including policies, agent health, exclusions, alerts, and reporting.
• Analyze vulnerability findings and endpoint alerts, coordinate remediation and escalation, and verify corrective actions through rescanning.
• Evaluate CVEs, DTOs, vulnerability notifications, and emerging security issues; perform targeted validation as needed.
• Develop dashboards, metrics, reports, runbooks, procedures, and technical evidence for leadership, RMF, continuous monitoring, POA&M management, assessments, and authorization activities.

Requirements

• U.S. citizenship.
• Ability to obtain a Secret clearance; active clearance preferred.
• Active DoD 8140 IAT Level II Security+ certification or higher.
• Ability to work up to 3 days per week in a hybrid capacity from Fairfax, VA, with additional onsite support as required.
• 8+ years of cybersecurity experience with a strong background in vulnerability management and endpoint security.
• Experience administering ACAS, including scan creation and modification, target and credential management, scheduling, plugin-result review, authentication troubleshooting, and vulnerability reporting.
• Experience administering Trellix and ePO, including endpoint policies, agent health, alerts, exclusions, updates, deployments, and reporting.
• Ability to independently manage ACAS and Trellix operations, review findings and endpoint events, coordinate remediation, and confirm closure through rescans.
• Experience developing reports, metrics, dashboards, spreadsheets, and SOPs for vulnerability management, endpoint security, continuous monitoring, and POA&M tracking.
• Ability to evaluate CVEs, DTOs, vulnerability notifications, and other security advisories and perform targeted validation.
• Working knowledge of Windows, Linux, networking, AWS, and Active Directory as they relate to vulnerability scanning and endpoint security.
• Familiarity with DoD vulnerability management, DISA STIGs, RMF, continuous monitoring, and POA&M processes.
• Strong troubleshooting, documentation, communication, problem-solving, decision-making, and stakeholder-management skills.

Culture & Benefits

• Full-time role reporting to the Senior Information System Security Manager.
• Hybrid work arrangement with required Fairfax office attendance and possible additional onsite support based on mission needs.
• Work directly with engineers, system administrators, cybersecurity leadership, and other stakeholders to resolve security findings.
• Benefits are provided; details are available through the company benefits information.