ISSO Vulnerability Management

Description

Leidos has a career opportunity for an ISSO Vulnerability Management to support the Air Force National Capital Region IT Services program.

The AFNCR IT Services program provides support services for information systems for Headquarters Air Force (HAF), Air Force District of Washington (AFDW), Office of the Secretary of Defense (OSD), Joint Chiefs of Staff, and other Air Force activities within the AFNCR, missions to include the Pentagon, Joint Base Andrews (JBA), Joint Base Anacostia-Bolling (JBAB), and other locations, leased spaces, and alternate sites.

The major support areas required are IT Operations and Maintenance;
Plans, Projects, and Engineering (PP&E); and National Military Command Center (NMCC). The senior leaders and national defense missions that are supported require that the AFNCR operations never fail, resulting in a fast-paced, challenging, but also rewarding environment.

• Manage the POAM process for Vulnerabilities and STIG violations
• Analyze scan results to identify CAT I/II/III findings, false positives, and configuration errors.
• Track and document remediation actions, POA&Ms, and exceptions in alignment with RMF guidance.
• Validate and interpret DISA STIG checklists, collaborate with system admins and engineers to ensure secure configurations.
• Prepare and deliver vulnerability reports, compliance dashboards, and metrics for leadership and inspection readiness (e.g., CCRI/CORA).
• Support the development and maintenance of asset groupings, scan zones, credentialed scanning, and scan tuning strategies.
• Work closely with Queue Managers, ISSOs, and Engineering teams to prioritize and close critical vulnerabilities.
• Maintain data hygiene within ACAS, ensuring consistent tagging, grouping, and reporting structures.

• Active DoD Secret clearance required.
• CompTIA Security+ CE or higher DoD 8570 IAT Level II certification must meet 8140 ISSM role qualification.
• Bachelor's Degree and 2-4 years of experience. Additional years of experience or certifications may be considered in lieu of a degree.
• 3+ years of cybersecurity or system administration experience, with at least 1 year of direct ACAS or Tenable experience.
• Working knowledge of DISA STIGs, vulnerability risk levels, and POA&M remediation strategies.
• Familiarity with NIST SP 800-53, RMF compliance, and Air Force cybersecurity policy (AFMAN 17-130).
• Strong attention to detail, documentation skills, and the ability to interpret technical vulnerability data.

• Experience supporting USAF, DISA, or other DoD mission systems.
• Familiarity with ACAS, DISPATCH EvaluateSTIG, STIGManager, involvement in CCRI/CORA preparation or vulnerability remediation campaigns.
• Ability to communicate risk-based recommendations to both technical and non-technical stakeholders.
• Understanding of automation tools/scripts (e.g., Power Shell, Nessus APIs) to support scan or report optimization.

• $69,550.00 - $

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.