Vulnerability Management and Endpoint Security Administrator

• Analyze enterprise vulnerability and endpoint security posture across Windows, Linux, virtual, and enterprise environments.
• Administer and optimize ACAS/Nessus capabilities, including scan architecture, credentialed scanning, vulnerability analysis, reporting, and troubleshooting.
• Conduct in-depth vulnerability assessments and establish risk-based remediation priorities.
• Evaluate cybersecurity risks, compensating controls, remediation alternatives, and exception requests.
• Utilize Tanium to assess endpoint visibility, asset inventory, compliance posture, vulnerability exposure, and remediation requirements.
• Analyze endpoint-security posture using Trellix and associated technologies.
• Correlate security, compliance, vulnerability, and asset-management data to identify enterprise-wide risks and coverage gaps.
• Develop and recommend solutions to complex vulnerability-management and endpoint-security challenges.
• Assess vulnerability exceptions, risk-acceptance requests, and provide technical recommendations to leadership.
• Evaluate endpoint configurations and recommend security-hardening strategies aligned with STIG requirements.
• Develop dashboards, metrics, reporting, and executive-level cybersecurity summaries.
• Support incident response, threat hunting, and endpoint containment activities.
• Assess cybersecurity impacts of proposed infrastructure, software, and security-tool changes.
• Recommend improvements to vulnerability-management processes, technologies, and operating procedures.
• Develop and maintain technical standards, procedures, and knowledge documentation.
• Advise engineers, system owners, cybersecurity personnel, and leadership on risk and remediation strategies.
• Manage competing priorities while independently determining appropriate technical approaches within contractual and security requirements.

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related discipline and at least 4 years of relevant experience; or 8+ years of relevant experience in lieu of a degree.
• 4+ years of progressively responsible experience in vulnerability management, endpoint security, cybersecurity engineering, information assurance, or related enterprise cybersecurity functions.
• Demonstrated ability to independently assess cybersecurity vulnerabilities, evaluate risk, and recommend remediation strategies.
• Strong hands-on experience with ACAS/Nessus, including scanning, policy administration, credentialed scanning, reporting, remediation, and validation.
• Strong hands-on experience with Tanium for endpoint management, compliance analysis, visibility, asset inventory, and vulnerability remediation.
• Working knowledge of Trellix endpoint-security technologies.
• Experience conducting risk-based vulnerability analysis and establishing remediation priorities.
• Experience administering and securing both Microsoft Windows and Linux environments.
• Working knowledge of DISA STIG compliance, SCC, STIG Viewer, secure configuration baselines, and security-hardening methodologies.
• Knowledge of NIST, ICD, CNSS, and DoD cybersecurity requirements and standards.
• Excellent analytical, communication, organizational, and problem-solving skills.
• Active DoD 8140 IAT Level II certification (Security+ CE or equivalent).
• Ability to satisfy applicable DoD 8140 Cyber Workforce qualification requirements.
• Active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance.

• Direct experience supporting FISMA Security Authorization activities, A&A/RMF processes, ATOs, NIST SP 800-53 control assessments, and authorization package development or maintenance.
• Experience developing, reviewing, or maintaining federal cybersecurity authorization documentation and artifacts.
• Hands-on experience with vulnerability management and/or security monitoring activities, including scan review, validation, prioritization, remediation coordination, and status reporting.
• Experience supporting incident response activities including alert triage, documentation, escalation, containment support, recovery coordination, and lessons learned.
• Experience documenting findings, risks, corrective actions, control evidence, and POA&M activities in an audit-ready environment.
• Ability to communicate cybersecurity and compliance requirements effectively to both technical and non-technical stakeholders.

• Ability to obtain or maintain an HHS Public Trust Tier II background investigation.

• Advanced expertise with Tanium Asset, Discover, Comply, Deploy, Patch, Interact, Reporting, and custom sensor development.
• Advanced ACAS/Nessus architecture, administration, dashboarding, credentialed scan troubleshooting, and enterprise reporting experience.
• Experience with Trellix ePO, Trellix Endpoint Security, Microsoft Defender for Endpoint, or comparable EDR platforms.
• Previous experience as an ISSO, ISSM, Cybersecurity Engineer, or similar cybersecurity leadership role.
• Experience supporting DoW environments, classified networks, or large-scale enterprise cybersecurity operations.
• Experience creating vulnerability-management dashboards, automated reporting solutions, and integrations using PowerShell, Python, SQL, or similar technologies.
• Experience evaluating POA&Ms, compensating controls, risk acceptance requests, and vulnerability exceptions.
• Experience advising technical and program leadership on cybersecurity strategy and risk management decisions.
• Relevant Microsoft, Linux, RHCSA, Linux+, or comparable technical certifications.

• Customer Experience: Strive for excellence and delight our clients 
• Innovation: Embrace creative thinking to enable continual growth and powerful solutions 
• Accountability: Take ownership of and pride in our actions and service delivery 
• Inspire: Be inspired to be your best self and have fun in the process 
• Integrity: Do the right thing, the right way, every time! 
• Stewardship: The careful and responsible management of something entrusted to our care. 

NOTICE: Please be aware that all JCS Solutions communications related to job interviews and offers from our recruiting team will only come from @JCSSolutions.com. We want to emphasize that we do not conduct any interviews over Discord, Slack, Skype, Zoom, or any chat app.