Posted 1 month ago
USAF - ACAS EngineercFocus Software · Linthicum Heights
USAF - ACAS Engineer
Linthicum HeightsOn-siteFull-time
AI Summary
The ACAS Engineer configures and operates enterprise vulnerability scanning tools, runs weekly credentialed scans of DC3 networks, analyzes and prioritizes findings, and coordinates remediation and verification with system owners for USAF cybersecurity compliance.
About this role
cFocus Software seeks a ACAS Engineer to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance.
Qualifications:
Qualifications:
- Active TS/SCI clearance
- B.S. Computer Science, Information Technology, or a related field
- Experience administering ACAS or comparable enterprise vulnerability assessment tools, including scan configuration, scheduling, credentialed scanning, and reporting.
- Ability to diagnose scan failures and authentication issues, assess coverage, validate findings, and verify remediation through follow-up scanning.
- Working knowledge of enterprise networks, server operating systems, applications, virtual infrastructure, and cloud or hybrid environments.
- Experience interpreting vulnerability findings and coordinating patching, secure configuration changes, and STIG remediation with technical teams.
- Ability to prepare accurate vulnerability reports, maintain assessment records, and provide technical evidence for cybersecurity compliance and authorization activities.
- Clear communication skills for explaining findings, coordinating remediation, and working with system owners and operations personnel.
- Configure, operate, and maintain assigned ACAS and Government-approved enterprise vulnerability scanning capabilities, following approved designs, security baselines, and change procedures.
- Perform weekly vulnerability scans of DC3 networks and applications. Coordinate credentialed scanning across scoped IT and operational technology assets, including approved scan windows and access arrangements.
- Maintain scan scope and asset coverage records; identify missed assets, failed scans, and authentication problems, and coordinate corrective action to improve coverage.
- Analyze scan results, validate findings, investigate suspected false positives, and prioritize vulnerabilities for remediation in coordination with system owners and cybersecurity personnel.
- Prepare and submit the Vulnerability Report using the CORA scoring model to the Government no later than 5 p.m. Eastern Time every Friday. Check report accuracy, completeness, and technical quality before submission.
- Track identified vulnerabilities through remediation and verification. Recommend corrective actions, coordinate patching and secure configuration changes, and perform follow-up scans to validate closure.
- Support continuous vulnerability monitoring and secure configuration management. Provide findings and technical evidence for compliance reviews and security posture reporting.
- Coordinate with systems administrators and engineers to support timely remediation of critical infrastructure vulnerabilities and implementation of Government-directed security requirements.
- Support the automated Vulnerability Management Program through approved CI/CD workflows, scan analysis, remediation recommendations, and patch verification.
- Support Infrastructure as Code and Configuration as Code processes by evaluating security findings and proposed changes before authorized deployment to production.
- Assist with enterprise scanning engine deployment for Initial Operational Capability (IOC), due 180 calendar days after the transition-in period, and support continued scanning during NOC/SOC sustainment.
- Provide vulnerability data, scan records, and technical evidence supporting Risk Management Framework assessments and Authorization to Operate or continuous ATO activities.
- Maintain scanning procedures and troubleshooting documentation.
- Coordinate with NOC, SOC, and incident response personnel when findings indicate potential compromise or urgent security exposure.
Skills
ACASCI/CDCloud EnvironmentsConfiguration As CodeContinuous ATOCORA ScoringCredentialed ScanningEnterprise NetworksInfrastructure As CodeNessusRisk Management FrameworkServer Operating SystemsSTIG RemediationTS/SCI ClearanceVirtualizationVulnerability Management
Explore related jobs
More jobs at cFocus Software
Similar ACAS jobs
Jobs in Linthicum Heights
- N
Branch Manager-On SiteNorthrop Grumman Federal Credit Union · Linthicum Heights, MD - L
Sr. Cybersecurity Systems EngineerLEIDOS, INC. · Linthicum Heights, Maryland - LCybersecurity Systems EngineerLEIDOS, INC. · Linthicum Heights, Maryland
- BTriage AnalystBooz Allen Hamilton_United States · Linthicum Heights, Maryland
- MHotel DriverMitags · Linthicum Heights, Maryland
- C
Penetration Tester- FULLY CLEARED with POLYGRAPH REQUIREDConstellation Technologies, Inc · Linthicum Heights, Maryland
Browse these categories
Market data for this role
All reports →- SeriesRole reportsOne role family at a time: how many openings, what changed this week, who is hiring, what it pays.
- SeriesSalary reportsWhat employers publish in job postings, by level and workplace. Not self-reported pay.
- Market overviewState of tech hiring, September 2026: up 4.8%Tech hiring rose 4.8% month over month in September 2026, with 411,122 new listings. Customer support and account executive roles led the growth.