ALTA IT Services, LLC
Overview
The Senior Cyber Operations Engineer provides expert-level support to enterprise vulnerability management programs across cloud-based infrastructures. This role is responsible for identifying, analyzing, and driving remediation of security vulnerabilities in alignment with DoD cybersecurity standards and RMF requirements, and for maturing continuous monitoring capabilities using industry-standard tools such as ACAS (Tenable.sc), AWS Inspector, and DISA STIG frameworks. Core Responsibilities
Lead enterprise-wide vulnerability scanning, analysis, and reporting using ACAS for traditional infrastructure and AWS Inspector for cloud-hosted assets Interpret and apply DISA STIGs to support secure configuration baselines, remediation plans, and POA&M lifecycle management Coordinate with system owners, application teams, and ISSOs to drive resolution of findings Automate scanning and reporting pipelines to enhance operational efficiency Create and maintain vulnerability dashboards, compliance reports, and audit-ready documentation Support continuous monitoring tasks under RMF and ensure timely ingestion of findings into eMASS Provide mentorship to junior analysts and contribute to standard operating procedures and policy refinement Minimum Qualifications
10+ years of hands-on experience in cybersecurity operations Demonstrated expertise with ACAS (Tenable.sc/Nessus), AWS Inspector, and DISA STIGs Solid understanding of NIST SP 800-53 controls and RMF processes Hands-on expertise with compliance systems such as eMASS, STIG Viewer, and SCAP tools Strong technical writing and communication skills to support findings, reports, and remediation plans Preferred Qualifications
AWS Security Certification or equivalent cloud security credential Scripting languages (e.g., Python, PowerShell, Bash) to support security automation Experience with STIG Manager, Splunk Enterprise Security, or similar orchestration tools Clearance Requirement
Active Top Secret CI Poly preferred Location & Employment Type
Hybrid- Alexandria, VA Direct Hire Company Information
System One, and its subsidiaries including Joulé, ALTA IT Services, and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.
#J-18808-Ljbffr
The Senior Cyber Operations Engineer provides expert-level support to enterprise vulnerability management programs across cloud-based infrastructures. This role is responsible for identifying, analyzing, and driving remediation of security vulnerabilities in alignment with DoD cybersecurity standards and RMF requirements, and for maturing continuous monitoring capabilities using industry-standard tools such as ACAS (Tenable.sc), AWS Inspector, and DISA STIG frameworks. Core Responsibilities
Lead enterprise-wide vulnerability scanning, analysis, and reporting using ACAS for traditional infrastructure and AWS Inspector for cloud-hosted assets Interpret and apply DISA STIGs to support secure configuration baselines, remediation plans, and POA&M lifecycle management Coordinate with system owners, application teams, and ISSOs to drive resolution of findings Automate scanning and reporting pipelines to enhance operational efficiency Create and maintain vulnerability dashboards, compliance reports, and audit-ready documentation Support continuous monitoring tasks under RMF and ensure timely ingestion of findings into eMASS Provide mentorship to junior analysts and contribute to standard operating procedures and policy refinement Minimum Qualifications
10+ years of hands-on experience in cybersecurity operations Demonstrated expertise with ACAS (Tenable.sc/Nessus), AWS Inspector, and DISA STIGs Solid understanding of NIST SP 800-53 controls and RMF processes Hands-on expertise with compliance systems such as eMASS, STIG Viewer, and SCAP tools Strong technical writing and communication skills to support findings, reports, and remediation plans Preferred Qualifications
AWS Security Certification or equivalent cloud security credential Scripting languages (e.g., Python, PowerShell, Bash) to support security automation Experience with STIG Manager, Splunk Enterprise Security, or similar orchestration tools Clearance Requirement
Active Top Secret CI Poly preferred Location & Employment Type
Hybrid- Alexandria, VA Direct Hire Company Information
System One, and its subsidiaries including Joulé, ALTA IT Services, and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.
#J-18808-Ljbffr