ACAS Engineer

Peraton•Washington, DC

3d•$135,000 - $216,000

About The Position

Peraton is seeking an ACAS Engineer to support vulnerability management, security compliance, and continuous monitoring across classified government enterprise environments. The role administers the Defense Information Systems Agency (DISA) Assured Compliance Assessment Solution (ACAS), including Tenable Security Center and Nessus scanners, to identify, assess, validate, and report vulnerabilities across complex, segmented networks. The engineer maintains scanning infrastructure; performs vulnerability and compliance assessments; analyzes and validates findings; and provides actionable remediation guidance to system owners, information system security teams, and government leadership. The position requires knowledge of DISA security requirements, Risk Management Framework (RMF) processes, and classified network security operations.

Requirements

Minimum experience: 8 years with a BS/BA; 6 years with an MS/MA; 3 years with a PhD; or 12 years with a high school diploma.
Demonstrated experience administering and operating ACAS using Tenable Security Center and Nessus.
Experience managing enterprise vulnerability scanning operations across large, distributed, and segmented network environments.
Hands-on experience configuring scan policies, managing scan zones and repositories, maintaining scanner connectivity, and troubleshooting scan failures.
Ability to analyze vulnerability and compliance findings, validate results, identify false positives, and develop practical remediation recommendations.
Experience producing vulnerability reports, compliance summaries, dashboards, and technical briefings for government customers and senior leadership.
Understanding of the Risk Management Framework, continuous monitoring, vulnerability remediation tracking, and security authorization processes.
Ability to communicate technical findings clearly to system administrators, security personnel, program stakeholders, and government leadership.
Ability to work independently and collaboratively in a mission-focused, security-conscious government contracting environment.
U.S. citizenship and Department of Energy clearance.

Nice To Haves

Experience supporting Department of Energy (DOE) or National Laboratory enterprise environments.
Experience leading ACAS operations, coordinating scanner maintenance, establishing enterprise scanning procedures, and providing technical direction to other cybersecurity personnel.
Familiarity with DISA eMASS, Host-Based Security System (HBSS), and Enterprise Security Solutions (ESS).

Responsibilities

Administer and maintain Tenable Security Center, including user access controls, repository configurations, scan zones, scanning policies, and enterprise vulnerability management operations.
Maintain, configure, monitor, and troubleshoot distributed Nessus scanner infrastructure.
Plan, configure, and execute authorized network discovery, vulnerability, and compliance scans across classified and unclassified government information systems.
Analyze ACAS scan results, validate findings, investigate anomalies, and resolve false positives through technical verification and documented analysis.
Map vulnerabilities to applicable security requirements and provide system owners with prioritized remediation recommendations, supporting evidence, and risk-based corrective actions.
Develop and maintain vulnerability and compliance dashboards, executive summaries, and technical reports for government leadership, cybersecurity stakeholders, and laboratory security teams.
Monitor scan coverage, identify assessment gaps, track remediation progress, and maintain accurate vulnerability status information.
Coordinate with cybersecurity operations, system administrators, network engineers, and information system security personnel to resolve scanning issues and improve assessment effectiveness.
Maintain standard operating procedures, scan configurations, troubleshooting documentation, and operational metrics in accordance with contract requirements and government security policies.
Perform duties in accordance with government security policies, classification requirements, access restrictions, and approved system operating procedures.

Benefits

Medical insurance
Dental insurance
Vision insurance
Life insurance
Health savings account
Short- and long-term disability
Employee assistance program (EAP)
Parental leave
401(k)
Paid time off (PTO) for vacation
Company-paid holidays
Employees may be eligible for overtime, shift differential, and a discretionary bonus, depending on the position.