ACAS Subject Matter Expert

About the Job

ACAS Subject Matter Expert

Falls Church, Virginia.

Full-time.

Important Notice: This position is contingent upon contract award.

Summary:

ACAS Subject Matter Experts manage and operate DoD's enterprise vulnerability scanning capability based on Tenable Security Center and Nessus. This role configures scan policies, manages scanning infrastructure, coordinates credentialed scans across the enterprise, analyzes scan results, and produces compliance reports for government stakeholders meeting DoDI 8531.01 requirements.

Key Responsibilities:

• Manage enterprise ACAS deployment with 10-20 Nessus scanners.
• Execute 150-400 credentialed vulnerability scans weekly across 200-600 systems.
• Analyze 5,000-15,000 vulnerability findings weekly.
• Execute 100-300 STIG and SRG compliance scans monthly.
• Develop 20-50 custom scan policies for specialized systems.
• Generate 15-30 ACAS compliance reports monthly for government stakeholders.
• Configure Tenable Security Center for enterprise vulnerability management.
• Maintain scanner infrastructure ensuring 99%+ availability.

Performance Metrics:

• Systems Scanned: 200-600 systems managed per SME.
• Weekly Scans: 150-400 credentialed vulnerability scans.
• Findings Generated: 5,000-15,000 weekly requiring analysis.
• Compliance Scans: 100-300 STIG/SRG scans monthly.
• Custom Policies: 20-50 maintained.
• Monthly Reports: 15-30 compliance reports delivered.
• Scanner Infrastructure: 10-20 scanners managed.

Requirements:

• Clearance: Secret (NIPR), Top Secret (SIPR), or TS/SCI Eligible (JWICS) based on network assignment.
• Education: Bachelor's Degree in Information Technology, Cybersecurity, Computer Science, or related field.
• Experience: 10+ years vulnerability management; 5+ years ACAS/Tenable experience.
• Certifications: CISSP or Security+ required; Tenable certifications highly desired.
• Technical Knowledge: Expert knowledge of Tenable Security Center and Nessus, DISA STIGs, SCAP, compliance scanning, DoDI 8531.01.

About Advana:

Advana is the Department of Defense Chief Digital and Artificial Intelligence Office's (CDAO) enterprise-wide data, analytics, and AI platform. Advana provides DoD military and civilian decision makers with unprecedented access to enterprise data, tools, and capabilities in a secure environment. The platform hosts hundreds of curated applications across logistics, financial management, personnel, health, and other domains, accelerating decision advantage through accessible, actionable data and AI capabilities.

This position supports comprehensive cybersecurity operations for the Advana platform across three classified networks (NIPR, SIPR, JWICS).

Important Notes:

Position Status:

• This position is contingent upon contract award.
• Start date will be determined upon contract award.
• We will maintain contact with selected candidates throughout the award process.

Work Requirements:

• U.S. Citizen required.
• Clearance varies by network: Secret (NIPR), Top Secret (SIPR), or TS/SCI Eligible (JWICS).
• On-premises work required at Suffolk Building, Falls Church, VA.
• No remote work options available.
• Standard business hours with operational flexibility.

Benefits:

• 4 Weeks Paid Time Off.
• All Federal Holiday's Paid Vacation.
• Four Percent Matching 401K.
• Full health/vision/dental benefits for the employee and family paid 100% by ZTI Solutions, LLC.

We thank all applicants for their interest. Only candidates selected for interviews will be contacted.

About the Company

ZTI Solutions, LLC was founded in 1997 in Virginia and is classified as a small business. The company is owned and operated by its founder, Rudy Zadnik, who emphasizes moral and business excellence over increasing company profits. This results in a more customer-oriented attitude towards mission accomplishment, as opposed to growing profits or sales.Our approach to consulting and engineering centers around using only highly skilled personnel who are seasoned industry veterans. All employees hold high-level industry and vendor certifications. We offer a comprehensive set of consulting and staff augmentation services, primarily focused on networking and security consulting in the classified space.