Cybersecurity and Vulnerability Management Systems Administrator

NexGen Data Systems is seeking a Cybersecurity and Vulnerability Management Systems Administrator to secure DLA enterprise applications and servers, remediate vulnerabilities, maintain Risk Management Framework documentation, and support audit readiness across NIPRNet, SIPRNet, physical, virtual, and cloud-based environments.

The position will perform IAVM compliance, STIG and SCAP validation, ACAS remediation, POA&M and AORA development, BCSA documentation, RMF artifact maintenance, and support for Cybersecurity Vulnerability Assessments and Command Cyber Readiness Inspections.

Roles & Responsibilities:

• Review and remediate application, operating system, server, and infrastructure vulnerabilities.
• Support compliance with the DoD Information Assurance Vulnerability Management program.
• Analyze ACAS findings and prioritize remediation based on severity, exploitability, mission impact, and required completion dates.
• Apply and validate DISA Security Technical Implementation Guides and Security Content Automation Protocol outputs.
• Coordinate patching, secure configuration changes, application updates, and maintenance outages with system owners and technical teams.
• Develop vulnerability remediation plans and track corrective actions through closure.
• Identify findings requiring a Plan of Action and Milestones or Authorization Official Risk Assessment.
• Draft and maintain POA&Ms, AORAs, risk assessments, mitigation statements, milestone dates, and closure evidence.
• Develop and maintain RMF artifacts, standard operating procedures, STIG checklist outputs, scan results, and security documentation.
• Update Government cybersecurity repositories with current and accurate artifacts.
• Support Baseline Cyber Security Assessment approval and ongoing maintenance.
• Serve as a technical subject matter resource to DLA cybersecurity personnel and management.
• Support Cybersecurity Vulnerability Assessments, Command Cyber Readiness Inspections, audit readiness reviews, evidence requests, and remediation activities.
• Ensure no critical vulnerability remains unmitigated without documented Government-approved risk treatment.
• Transfer security playbooks, STIG and ACAS history, BCSA records, POA&Ms, AORAs, and audit artifacts during transition-out.

Other Duties: Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.