What are the responsibilities and job description for the Technical Cybersecurity Assessor-ACAS position at AERMOR LLC?
Employee Type: Full-Time
Location: Suffolk, VA
Job Type: Cyber Security Assessor (ACAS)
Experience: 3 Years
Clearance Type: TS/SCI
AERMOR is seeking a highly skilled ACAS Security Assessor to join our team, focusing on conducting comprehensive vulnerability assessments using the Assured Compliance Assessment Solution (ACAS) and other security tools. The successful candidate will identify critical flaws in applications, systems, and networks, providing detailed reports and recommendations for enhancing the security posture of our organization's infrastructure. The role involves both automated and manual vulnerability scanning, testing, and validation, as well as developing custom scripts to streamline security assessments.
Responsibilities:
Location: Suffolk, VA
Job Type: Cyber Security Assessor (ACAS)
Experience: 3 Years
Clearance Type: TS/SCI
AERMOR is seeking a highly skilled ACAS Security Assessor to join our team, focusing on conducting comprehensive vulnerability assessments using the Assured Compliance Assessment Solution (ACAS) and other security tools. The successful candidate will identify critical flaws in applications, systems, and networks, providing detailed reports and recommendations for enhancing the security posture of our organization's infrastructure. The role involves both automated and manual vulnerability scanning, testing, and validation, as well as developing custom scripts to streamline security assessments.
Responsibilities:
- Identify critical flaws in applications, systems, and networks that could be exploited by cyber attackers.
- Conduct vulnerability assessments for networks, applications, and operating systems, utilizing ACAS and other industry-standard tools.
- Use automated tools (e.g., Nessus) to quickly pinpoint vulnerabilities and streamline the assessment process.
- Conduct manual testing techniques to gain a deeper understanding of the security environment and reduce false negatives in findings.
- Manually validate and verify vulnerability scan results to reduce false positives.
- Write comprehensive Vulnerability Assessment Reports that summarize findings and provide actionable recommendations for remediation.
- Track vulnerabilities over time and provide metrics to demonstrate improvement or highlight areas for additional focus.
- Compile findings into detailed reports for leadership and technical teams to improve organizational security practices.
- Develop, test, and modify custom scripts and applications for vulnerability scanning and testing to address unique security challenges.
- Conduct regular network security audits and scanning on a predetermined schedule to ensure ongoing system integrity.
- Develop and maintain a vulnerability assessment database to document findings, track remediation efforts, and ensure compliance with security standards and regulations.
- Associate’s degree in a related field (e.g., Cybersecurity, Information Technology, Computer Science) or equivalent combination of education and professional experience.
- Proven experience with ACAS or similar vulnerability scanning and management tools (e.g., Nessus).
- Knowledge and experience with conducting vulnerability assessments for networks, applications, and operating systems.
- Familiarity with network security audits, vulnerability management processes, and industry standards.
- Strong experience with manual testing techniques and identifying critical vulnerabilities in complex systems.
- Experience developing and maintaining custom scripts for vulnerability scanning
- Must have the ability to travel locally or internationally between sites, as necessary. Up to 50% of travel time
