Vulnerability Assessment Lead — Mantua, VA at Episcopal

About Everforth ECS

Everforth ECS is the federal segment of a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies. Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow. We value attracting and developing top talent, fostering a culture that is engaging, accountable, and mission-driven.

About the Role

This position supports the War Data Platform (WDP), a key initiative within the U.S. Department of War's AI-First strategy introduced in early 2026. The WDP focuses on operational warfighting data and aims to accelerate the deployment of artificial intelligence on the battlefield, extending to Unclassified, Secret, and Top Secret environments. In this role, you will direct enterprise vulnerability assessment operations to protect DoW mission systems across both unclassified and classified networks. You will serve as a bridge between technical security operations and senior leadership, producing authoritative reports and compliance dashboards for Authorizing Officials and Combatant Command stakeholders. Your work will directly advance program values of mission assurance, operational readiness, and information advantage.

Location and Contingency

This role is based in the National Capital Region, covering the Pentagon, Falls Church, and Fairfax. Please note that this position is contingent upon contract award.

Equal Opportunity

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis of any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, or local jurisdiction law.

Join Us

Meet the challenge. Make a difference with Everforth ECS!

Work location

Work model: On-site

9115, Santayana Drive, Mantua, Fairfax County, Virginia, 22031, United States

Mantua, Virginia

Key Responsibilities

check_circleDirect enterprise vulnerability assessment operations using ACAS, Tenable Security Center, and Nessus
check_circleOperate and sustain scanning infrastructure to deliver continuous monitoring aligned with RMF objectives
check_circleDevelop and maintain custom scan policies, STIG and SRG compliance profiles, and asset tagging structures
check_circleAnalyze vulnerability findings, validate results, and correlate findings with IAVA notifications and patch cycles
check_circleCoordinate remediation activities with system administrators and cybersecurity teams using ServiceNow and Jira
check_circleProduce authoritative vulnerability assessment reports, compliance dashboards, and executive summaries for stakeholders
check_circleMaintain scanning infrastructure availability through lifecycle management, scanner updates, and performance tuning
check_circleSupport audit readiness and authorization decisions through traceable documentation and defensible reporting

Requirements

verifiedCurrent Secret security clearance with ability to obtain Top Secret (TS) with Sensitive Compartmented Information (SCI)
verifiedCompTIA Security+ CE, ISC² CAP, ISC² SSCP, or GIAC GSLC certification
verified12+ years experience in enterprise vulnerability assessment and compliance scanning using ACAS, Tenable, and Nessus

Nice to Have

Active Top Secret (TS) security clearance with Sensitive Compartmented Information (SCI) eligibility. Proven ability to integrate vulnerability-assessment data with CMDB and incident-response workflows to accelerate remediation cycles. Experience with continuous monitoring, Risk Management Framework (RMF) lifecycle, and DoW transactional controls. Knowledge of container-based scanning and multimodal network protection in virtualized and cloud environments. Familiarity with reporting tools such as Power BI, Grafana, or similar for security dashboards.

Frequently asked questions about ACAS Vulnerability Assessment Lead SME with Security Clearance at Episcopal Community Services of San Francisco

What does a ACAS Vulnerability Assessment Lead SME with Security Clearance at Episcopal Community Services of San Francisco do?expand_more

Day-to-day, the ACAS Vulnerability Assessment Lead SME with Security Clearance at Episcopal Community Services of San Francisco will direct enterprise vulnerability assessment operations using acas, tenable security center, and nessus; operate and sustain scanning infrastructure to deliver continuous monitoring aligned with rmf objectives; develop and maintain custom scan policies, stig and srg compliance profiles, and asset tagging structures; and analyze vulnerability findings, validate results, and correlate findings with iava notifications and patch cycles.

What are the requirements for this ACAS Vulnerability Assessment Lead SME with Security Clearance role?expand_more

To qualify for the ACAS Vulnerability Assessment Lead SME with Security Clearance at Episcopal Community Services of San Francisco position, applicants should have: Current Secret security clearance with ability to obtain Top Secret (TS) with Sensitive Compartmented Information (SCI); CompTIA Security+ CE, ISC² CAP, ISC² SSCP, or GIAC GSLC certification; and 12+ years experience in enterprise vulnerability assessment and compliance scanning using ACAS, Tenable, and Nessus.

Where is the ACAS Vulnerability Assessment Lead SME with Security Clearance role at Episcopal Community Services of San Francisco located?expand_more

ACAS Vulnerability Assessment Lead SME with Security Clearance at Episcopal Community Services of San Francisco is based in 9115, Santayana Drive, Mantua, Fairfax County, Virginia, 22031, United States. This is a on-site role.

Is this ACAS Vulnerability Assessment Lead SME with Security Clearance job remote, hybrid, or on-site?expand_more

Episcopal Community Services of San Francisco has listed this ACAS Vulnerability Assessment Lead SME with Security Clearance role as on-site.

How much experience is required for this ACAS Vulnerability Assessment Lead SME with Security Clearance role?expand_more

ACAS Vulnerability Assessment Lead SME with Security Clearance at Episcopal Community Services of San Francisco typically requires 12+ years of relevant experience at the lead level.

What skills do you need for the ACAS Vulnerability Assessment Lead SME with Security Clearance role at Episcopal Community Services of San Francisco?expand_more

Key skills for ACAS Vulnerability Assessment Lead SME with Security Clearance at Episcopal Community Services of San Francisco include Comp Tia Security+ Ce; Isc² Cap; Isc² SSCP; Giac GSLC; Ac As; Tenable Security Center; Nessus; and Vmware.

What category does the ACAS Vulnerability Assessment Lead SME with Security Clearance role belong to?expand_more

ACAS Vulnerability Assessment Lead SME with Security Clearance at Episcopal Community Services of San Francisco is part of the it job category on Recrutus.

ACAS Vulnerability Assessment Lead SME with Security Clearance