- Location
- Mechanicsburg, Pennsylvania, United States · published
- Type
- Contract
- Department
- Management
- Source
- Workable
Description
Company Overview
Enterprise Horizon Consulting Group (EHCG) is a Woman-Owned Small Business specializing in IT Consulting which has successfully delivered key capabilities to the Navy, Army, and NASA over the past 20+ years. EHCG provides best in class services to its customers in the following areas: Business Systems Services; Business Intelligence; Data Analytics and Dashboarding; Enterprise Resource Planning (SAP) Implementation; Legacy System Optimization; Digital Transformation; Cloud Migration; Integration and Modernization; and Risk Management Framework Processes (RMF).
Job Description
Enterprise Horizon is seeking a Vulnerability Management Specialist to join our team. This position plays a critical role in maintaining compliance with DoD cybersecurity directives, protecting networks, and supporting the Risk Management Framework (RMF) process.
Location: Remote
Core Responsibilities
- Work closely with DoD leadership to support Risk Management Framework (RMF) accreditation activities.
- Utilize eMASS to manage RMF artifacts, control status, and ATO packages.
- Introduce new tools and configuration standards to meet the increased Information Assurance (IA) accreditation requirements of auditability, reporting, monitoring, implementing and managing access controls.
- Plan, configure, and execute ACAS scans across enterprise systems, applications, and enclaves.
- Utilize Tenable Security Center and Tenable Manager to operate and maintain the vulnerability management process.
- Analyze scan results, validate vulnerabilities, and work with system owners to remediate findings.
- Maintain and update vulnerability scan schedules, baselines, and documentation in accordance with DoD guidance.
- Monitor system logs and security events to detect anomalies, potential intrusions, and insider threats.
- Provide technical expertise in vulnerability management, reporting, and compliance with STIGs, IAVMs, and CCRI readiness requirements.
- Develop, review, and maintain technical documentation including SOPs, POA&Ms, and knowledge-base documentation for ACAS and other operations.
- Collaborate closely with Information System Security Managers (ISSMs), administrators, and DoD leadership to improve cyber defense posture.