ACAS Engineer
Peraton · Washington, DC, US
About this role
## ACAS Engineer ### Overview Peraton is seeking a qualified **ACAS Engineer** to support **vulnerability management, security compliance, and continuous monitoring** operations across **classified government enterprise environments**. You will administer and operate **DISA Assured Compliance Assessment Solution (ACAS)** using **Tenable Security Center** and **Nessus** scanners to identify, assess, validate, and report vulnerabilities across complex, segmented networks. ### Responsibilities - Administer and maintain **Tenable Security Center** (user access controls, repository configurations, scan zones, scanning policies, and enterprise vulnerability management operations) - Maintain, configure, monitor, and troubleshoot **distributed Nessus scanner infrastructure** - Plan, configure, and execute **network discovery, vulnerability, and compliance scans** across classified and unclassified systems (as authorized) - Analyze ACAS scan results to: - identify security weaknesses - validate findings - investigate anomalies - resolve false positives via technical verification and documented analysis - Map vulnerabilities to applicable security requirements and provide **clear, prioritized remediation recommendations** with evidence and risk-based corrective actions - Develop and maintain **vulnerability/compliance dashboards, executive summaries, and technical reports** for leadership and stakeholders - Monitor scan coverage, identify assessment gaps, track remediation progress, and maintain accurate vulnerability status information - Coordinate with cybersecurity operations, system administrators, network engineers, and information system security personnel to resolve scanning issues and improve assessment effectiveness - Maintain standard operating procedures, scan configurations, troubleshooting documentation, and operational metrics per contract and government security policies - Perform duties in accordance with applicable government security policies, classification requirements, access restrictions, and approved operating procedures ### Qualifications **Required Qualifications** - Minimum education/experience (one of the following): - **8 years** with **BS/BA** - **6 years** with **MS/MA** - **3 years** with **PhD** - **12 years** with **HS Diploma** - Demonstrated experience administering and operating **ACAS** using **Tenable Security Center** and **Nessus** - Experience managing enterprise vulnerability scanning across large, distributed, segmented networks - Hands-on experience configuring scan policies, managing scan zones/repositories, maintaining scanner connectivity, and troubleshooting scan failures - Ability to analyze vulnerability/compliance findings, validate results, identify false positives, and recommend practical remediation - Experience producing vulnerability reports, compliance summaries, dashboards, and technical briefings for government customers and senior leadership - Understanding of **Risk Management Framework (RMF)**, continuous monitoring, vulnerability remediation tracking, and security authorization processes - Ability to communicate technical findings clearly to technical and leadership audiences - Ability to work independently and collaboratively in a mission-focused, security-conscious environment - **US Citizen** with **Department of Energy clearance** **Preferred Qualifications** - Experience supporting **Department of Energy (DOE)** or **National Laboratory** enterprise environme
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.