60 Aac Jobs Hiring Near You

Job Summary:
AAC Inc. is seeking a Sr IT Security/Vulnerability Management Specialist to enhance their IT security posture. The role involves managing vulnerabilities, conducting risk assessments, and collaborating with various stakeholders to achieve IT security goals.
Responsibilities:
• Requires bachelor’s degree in computer science, cyber security, engineering, or a related technical field. Additional experience and relevant certifications may be considered in leu of a degree.
• 5-7 years of progressive and related experience in IT security with at least 3 years in vulnerability management.
• Expert knowledge of IT security vulnerabilities and risk assessments with the ability to explain the risks associated with them to executives, program, and technology staff.
• Expert knowledge of Tenable.sc (on-prem) and Tenable.io (cloud).
• Strong knowledge of vulnerability management lifecycle, patch management, and risk scoring (e.g., CVSS2).
• Familiarity with cloud platforms (AWS and GCP) and hybrid environments.
• Understanding of Windows, Linux/Unix, and network devices security hardening.
• Ability to work with program staff, executives, security application vendors and technology staff to achieve IT security goals and objectives.
• Experience developing and maintaining Security Assessment and Authorization (SA&A) documentation for large IT systems for the Federal Government.
• Excellent working experience in applying FISMA, and FedRAMP processes and policies to information systems.
• Experience with Checkmarx and Checkmarx One (SaaS). Migration experience to Checkmarx One is desirable.
• Strong communication skills (both technical and non-technical) and ability to collaborate across IT, security, and business units.
• Ability to effectively communicate orally and in writing.
• Experience supporting a nationwide mid-to large Federal agency enterprise is a plus.
• CISSP certification required (ability to obtain within 6 months of start).
• Must obtain an agency public trust suitability determination prior to start date.
• Experience with scripting and automation (e.g., Python, PowerShell) to automate scanning tasks, reporting, and API integrations; administration and operation of security scanning and vulnerability management platforms such as Nessus.
• Deep expertise with SIEM platforms and integration of vulnerability data into enterprise monitoring.
• Understanding of the Secure Software Development Life Cycle.
Qualifications:
Required:
• Requires bachelor’s degree in computer science, cyber security, engineering, or a related technical field. Additional experience and relevant certifications may be considered in leu of a degree.
• 5-7 years of progressive and related experience in IT security with at least 3 years in vulnerability management.
• Expert knowledge of IT security vulnerabilities and risk assessments with the ability to explain the risks associated with them to executives, program, and technology staff.
• Expert knowledge of Tenable.sc (on-prem) and Tenable.io (cloud).
• Strong knowledge of vulnerability management lifecycle, patch management, and risk scoring (e.g., CVSS2).
• Familiarity with cloud platforms (AWS and GCP) and hybrid environments.
• Understanding of Windows, Linux/Unix, and network devices security hardening.
• Ability to work with program staff, executives, security application vendors and technology staff to achieve IT security goals and objectives.
• Experience developing and maintaining Security Assessment and Authorization (SA&A) documentation for large IT systems for the Federal Government.
• Excellent working experience in applying FISMA, and FedRAMP processes and policies to information systems.
• Experience with Checkmarx and Checkmarx One (SaaS). Migration experience to Checkmarx One is desirable.
• Strong communication skills (both technical and non-technical) and ability to collaborate across IT, security, and business units.
• Ability to effectively communicate orally and in writing.
• Experience supporting a nationwide mid-to large Federal agency enterprise is a plus.
• CISSP certification required (ability to obtain within 6 months of start).
• Must obtain an agency public trust suitability determination prior to start date.
Preferred:
• Experience with scripting and automation (e.g., Python, PowerShell) to automate scanning tasks, reporting, and API integrations; administration and operation of security scanning and vulnerability management platforms such as Nessus.
• Deep expertise with SIEM platforms and integration of vulnerability data into enterprise monitoring.
• Understanding of the Secure Software Development Life Cycle.
• Master’s degree or additional security or cloud certifications (e.g., CISM).
Company:
AAC (www.aac.com) is a Veteran-owned small business headquartered in Tysons Corner, VA. Founded in 1983, the company is headquartered in Vienna, USA, with a team of 201-500 employees. The company is currently Growth Stage.