Vulnerability Management and Endpoint Security Administrator

Grow, innovate, and generate progress:
Harness your expertise to solve challenges and celebrate success!

CS Solutions LLC is seeking a Vulnerability Management and Endpoint Security Administrator to provide cybersecurity expertise supporting enterprise IT operations on a high-profile Department of War (DoW) contract supporting DTRA. This role serves as a cybersecurity subject matter resource across Vulnerability Management and Endpoint Security teams, helping modernize, secure, and continuously improve enterprise IT services and mission capabilities across CONUS and OCONUS environments.

Location: Fort Belvoir, VA.
Clearance Required: Active TS/SCI.

Salary Range: $70,000 to $100,000.

• Analyze enterprise vulnerability and endpoint security posture across Windows, Linux, virtual, and enterprise environments.
• Administer and optimize ACAS/Nessus capabilities, including scan architecture, credentialed scanning, vulnerability analysis, reporting, and troubleshooting.
• Conduct in-depth vulnerability assessments and establish risk-based remediation priorities.
• Evaluate cybersecurity risks, compensating controls, remediation alternatives, and exception requests.
• Utilize Tanium to assess endpoint visibility, asset inventory, compliance posture, vulnerability exposure, and remediation requirements.
• Analyze endpoint-security posture using Trellix and associated technologies.
• Correlate security, compliance, vulnerability, and asset-management data to identify enterprise-wide risks and coverage gaps.
• Develop and recommend solutions to complex vulnerability-management and endpoint-security challenges.
• Assess vulnerability exceptions, risk-acceptance requests, and provide technical recommendations to leadership.
• Evaluate endpoint configurations and recommend security-hardening strategies aligned with STIG requirements.
• Develop dashboards, metrics, reporting, and executive-level cybersecurity summaries.
• Support incident response, threat hunting, and endpoint containment activities.
• Assess cybersecurity impacts of proposed infrastructure, software, and security-tool changes.
• Recommend improvements to vulnerability-management processes, technologies, and operating procedures.
• Develop and maintain technical standards, procedures, and knowledge documentation.
• Advise engineers, system owners, cybersecurity personnel, and leadership on risk and remediation strategies.
• Manage competing priorities while independently determining appropriate technical approaches within contractual and security requirements.

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related discipline and at least 4 years of relevant experience; or 8+ years of relevant experience in lieu of a degree.
• 4+ years of progressively responsible experience in vulnerability management, endpoint security, cybersecurity engineering, information assurance, or related enterprise cybersecurity functions.
• Demonstrated ability to independently assess cybersecurity vulnerabilities, evaluate risk, and recommend remediation strategies.
• Strong hands-on experience with ACAS/Nessus, including scanning, policy administration, credentialed scanning, reporting, remediation, and validation.
• Strong hands-on experience with Tanium for endpoint management, compliance analysis, visibility, asset inventory, and vulnerability remediation.
• Working knowledge of Trellix endpoint-security technologies.
• Experience conducting risk-based vulnerability analysis and establishing remediation priorities.
• Experience administering and securing both Microsoft Windows and Linux environments.
• Working knowledge of DISA STIG compliance, SCC, STIG Viewer, secure configuration baselines, and security-hardening methodologies.
• Knowledge of NIST, ICD, CNSS, and DoD cybersecurity requirements and standards.
• Excellent analytical, communication, organizational, and problem-solving skills.
• Active DoD 8140 IAT Level II certification (Security+ CE or equivalent).
• Ability to satisfy applicable DoD 8140 Cyber Workforce qualification requirements.
• Active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance.

• Direct experience supporting FISMA Security Authorization activities, A&A/RMF processes, ATOs, NIST SP 800-53 control assessments, and authorization package development or maintenance.
• Experience developing, reviewing, or maintaining federal cybersecurity authorization documentation and artifacts.
• Hands-on experience with…