ACAS Engineer

Peraton•Linthicum, MD

10d•Onsite

About The Position

Peraton is seeking an ACAS Engineer to join their team. This role involves developing implementation strategies, guidance, best practices, schedules, and detailed product feature specifications for integrating ACAS enterprise servers and services. The engineer will provide solution engineering to ensure systems and components meet current and future standards, perform ACAS administration, and test new ACAS technologies. Responsibilities include creating documentation to meet deadlines, performance tuning of systems, investigating issues with Tenable in a large and complex environment, and deploying, maintaining, and tuning Tenable scanners. The role also involves developing, creating, deploying, and managing Tenable scan configurations for global enterprise scanning services, ensuring ACAS scanners and Security Center are operational and reporting correctly. The engineer will assist customers in resolving ACAS issues, make recommendations, perform recurring vulnerability scans, and create repositories, queries, and dashboards. Investigating false positives, updating tracking mechanisms for false positives, and creating/updating all necessary documentation for the ACAS team are also key duties. This includes installing and configuring updates to Tenable software in compliance with STIG requirements, performing site-specific Tier II support, and researching/analyzing DoD and AF policies to mitigate implementation problems. The role requires creating, modifying, and maintaining supporting documentation such as system design specifications, diagrams, ports and protocols reports, implementation plans, process guides, security impact assessments, risk analysis, milestone forecasting, testing procedures, use cases, compliance documentation, and eMASS and RMF support. The ideal candidate is a motivated self-starter with strong written and verbal communication skills, capable of creating complex technical reports on analytic findings, and possesses strong analytical and troubleshooting skills, including non-domain joinable device scanning.

Requirements

Skills and expertise in the following technologies: SQL/XSQL Server Administrator (SA), MAC O/S and security, Information Assurance (IA), IP Data Networking and Vulnerability Assessment product engineering and design, REM 3.X/Retina 5.X and greater.
Implementing National Institute of Standards and Technology (NIST) and RMF standards and framework.
Experience running ACAS on Red Hat Enterprise Linux (RHEL).
Hands-on experience with general RHEL administration and troubleshooting.
Demonstrated experience with multiple network security zones, subnetting, VRFs, and VLANs.
Bachelor’s degree with 8+ years of relevant experience; or Master’s with 6+ years of relevant experience.
The degree in one of these fields of study is highly desired: Computer Science, Cybersecurity, Data Science, Information Systems, Mathematics, Software Engineering, or Information Technology.
In lieu of a degree, four years of additional relevant experience or specialized training may be accepted.
Active TS clearance with SCI eligibility.
Active CompTIA Security+ certification.
Active DISA ACAS certification.
8+ years of IT related experience preferred.
4-6 years Red Hat experience in a DoD enterprise network environment.
4-6 years of experience with Assured Compliance Assessment Solution (ACAS).
RHCSA / Linux+ / Solaris, DISA ACAS 5.x preferred.

Nice To Haves

Motivated self-starter with strong written and verbal communication skills, and the ability to create complex technical reports on analytic finding.
Strong analytical and troubleshooting skills.

Responsibilities

Develop implementation, guidance, best practice information, schedules, and detailed product feature specifications to support integration of ACAS enterprise servers and services.
Provide solution engineering to ensure systems and components meet current and future standards.
ACAS Administration.
Conduct testing of new ACAS technologies and create documentation to meet suspense dates.
Provide performance tuning to systems and investigate issues with Tenable spanning a large and complex environment.
Deploy, maintain, and perform tuning of Tenable scanners to meet current and future needs.
Develop, create, deploy, and manage Tenable scan configurations to support scanning services to global enterprise.
Ensure that the ACAS scanners and Security Center are operational and reporting properly.
Assist customers in resolving ACAS issues, make recommendations as needed.
Perform recurring vulnerability scans and create repositories, queries, and dashboards as necessary to ensure vulnerability report information is available.
Investigate false positives or potentially confusing scan data results.
Update and maintain tracking mechanism for false positives and track false positives until the finding is corrected; provide results upon resolution.
Create/Update all documentation needed to support the ACAS teams requirements, taskings, deliverables, and maintenance of the ACAS solution.
Install and configure updates to Tenable software as released and in compliance with STIG requirements.
Perform site-specific Tier II support such as risk mitigation activities as part of change/configuration management to ensure smooth implementation and transition to ACAS.
Support the research and analysis of DoD and AF policies and tasking orders to mitigate implementation problems that may impact the ACAS implementation.
Create, modify, maintain, or provide input for supporting documentation to include, but not limited to system design specifications, diagrams, ports and protocols reports, implementation plans, process guides, security impact assessments, risk analysis, milestone forecasting, testing procedures, use cases, compliance documentation, eMASS and RMF support.
Non-Domain joinable device scanning.