Vulnerability Management Specialist

About the role

Enterprise Horizon Consulting Group (EHCG), a woman-owned small business providing IT consulting to the Navy, Army and NASA, is hiring a Vulnerability Management Specialist. The role supports DoD cybersecurity directives, protects networks and backs up the Risk Management Framework (RMF) process. It is fully remote.

Key responsibilities

• Work with DoD leadership to support RMF accreditation activities.
• Use eMASS to manage RMF artifacts, control status and ATO packages.
• Introduce new tools and configuration standards to meet IA accreditation requirements for auditability, reporting, monitoring and access controls.
• Plan, configure and run ACAS scans across systems, applications and enclaves.
• Operate and maintain the vulnerability management process with Tenable Security Center and Tenable Manager.
• Analyze scan results, validate vulnerabilities and work with system owners to remediate findings.
• Maintain scan schedules, baselines and documentation per DoD guidance.
• Monitor logs and security events for anomalies, intrusions and insider threats.
• Advise on STIGs, IAVMs and CCRI readiness requirements.
• Write and maintain SOPs, POA&Ms and knowledge-base docs, and collaborate with ISSMs and administrators to strengthen cyber defense.

Required profile

• Active Secret clearance.
• 3-5 years of related experience.
• Familiarity with DoD cybersecurity policies, RMF, STIGs and network environments.
• Strong analytical, troubleshooting and communication skills.

Required skills

• Security+ certification (IAT II).
• Hands-on ACAS (Tenable Security Center / Tenable Manager) scanning and reporting.

What we offer

• Full-time salaried position with medical, dental and vision insurance.
• SIMPLE IRA with company match.
• Paid federal holidays, vacation and sick leave.
• Life, short-term and long-term disability insurance.