ACAS Engineer

Peraton • Washington, DC

1d

About The Position

Peraton is seeking an ACAS Engineer to support vulnerability management, security compliance, and continuous monitoring across classified government enterprise environments. The role administers the Defense Information Systems Agency (DISA) Assured Compliance Assessment Solution (ACAS), including Tenable Security Center and Nessus scanners, to identify, assess, validate, and report vulnerabilities across complex, segmented networks. The engineer maintains scanning infrastructure, executes vulnerability and compliance assessments, analyzes results, validates findings, and provides actionable remediation guidance to system owners, information system security teams, and government leadership. The position requires knowledge of DISA security requirements, Risk Management Framework (RMF) processes, and classified network security operations.

Requirements

• At least 8 years of experience with a BS/BA, 6 years with an MS/MA, 3 years with a PhD, or 12 years with a high school diploma.
• Demonstrated experience administering and operating ACAS using Tenable Security Center and Nessus.
• Experience managing enterprise vulnerability scanning operations across large, distributed, and segmented network environments.
• Hands-on experience configuring scan policies, managing scan zones and repositories, maintaining scanner connectivity, and troubleshooting scan failures.
• Ability to analyze vulnerability and compliance findings, validate results, identify false positives, and develop practical remediation recommendations.
• Experience producing vulnerability reports, compliance summaries, dashboards, and technical briefings for government customers and senior leadership.
• Understanding of the Risk Management Framework, continuous monitoring, vulnerability remediation tracking, and security authorization processes.
• Ability to communicate technical findings clearly to system administrators, security personnel, program stakeholders, and government leadership.
• Ability to work independently and collaboratively in a mission-focused, security-conscious government contracting environment.
• U.S. citizenship and a Department of Energy clearance.

Nice To Haves

• Experience supporting Department of Energy (DOE) or National Laboratory enterprise environments.
• Experience leading ACAS operations, coordinating scanner maintenance, establishing enterprise scanning procedures, and providing technical direction to other cybersecurity personnel.
• Familiarity with DISA eMASS, Host-Based Security System (HBSS), and Enterprise Security Solutions (ESS).

Responsibilities

• Administer and maintain Tenable Security Center, including user access controls, repository configurations, scan zones, scanning policies, and enterprise vulnerability management operations.
• Maintain, configure, monitor, and troubleshoot distributed Nessus scanner infrastructure.
• Plan, configure, and execute authorized network discovery, vulnerability, and compliance scans across classified and unclassified government information systems.
• Analyze ACAS scan results, validate findings, investigate anomalies, and resolve false positives through technical verification and documented analysis.
• Map vulnerabilities to applicable security requirements and provide system owners with prioritized remediation recommendations, supporting evidence, and risk-based corrective actions.
• Develop and maintain vulnerability and compliance dashboards, executive summaries, and technical reports for government leadership, cybersecurity stakeholders, and laboratory security teams.
• Monitor scan coverage, identify assessment gaps, track remediation progress, and maintain accurate vulnerability status information.
• Coordinate with cybersecurity operations, system administrators, network engineers, and information system security personnel to resolve scanning issues and improve assessment effectiveness.
• Maintain standard operating procedures, scan configurations, troubleshooting documentation, and operational metrics in accordance with contract requirements and government security policies.
• Perform duties in accordance with applicable government security policies, classification requirements, access restrictions, and approved system operating procedures.

Benefits

• Medical benefits
• Dental insurance
• Vision insurance
• Life insurance
• Health savings account
• Short- and long-term disability
• Employee Assistance Program (EAP)
• Parental leave
• 401(k)
• Paid time off (PTO) for vacation
• Company-paid holidays
• Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: High school or GED