ACAS Engineer

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.

• →Administer and maintain Tenable Security Center, including user access controls, repository configurations, scan zones, scanning policies, and enterprise vulnerability management operations.
• →Maintain, configure, monitor, and troubleshoot distributed Nessus scanner infrastructure.
• →Plan, configure, and execute network discovery, vulnerability, and compliance scans across classified and unclassified government information systems, as authorized.
• →Analyze ACAS scan results to identify security weaknesses, validate findings, investigate anomalies, and resolve false positives through technical verification and documented analysis.
• →Map identified vulnerabilities to applicable security requirements and provide system owners with clear, prioritized remediation recommendations, supporting evidence, and risk-based corrective actions.
• →Develop and maintain vulnerability and compliance dashboards, executive summaries, and technical reports for government leadership, cybersecurity stakeholders, and laboratory security teams.
• →Support ongoing security assessment activities by monitoring scan coverage, identifying assessment gaps, tracking remediation progress, and maintaining accurate vulnerability status information.
• →Coordinate with cybersecurity operations, system administrators, network engineers, and information system security personnel to resolve scanning issues and improve assessment effectiveness.
• →Maintain standard operating procedures, scan configurations, troubleshooting documentation, and operational metrics in accordance with contract requirements and government security policies.
• →Perform all duties in accordance with applicable government security policies, classification requirements, access restrictions, and approved system operating procedures.

We are seeking a qualified ACAS Engineer to support vulnerability management, security compliance, and continuous monitoring operations across classified government enterprise environments. The ideal candidate will possess hands-on experience administering the Defense Information Systems Agency (DISA) Assured Compliance Assessment Solution (ACAS), including Tenable Security Center and Nessus scanners, to identify, assess, validate, and report vulnerabilities across complex, segmented networks.

 

The ACAS Engineer will support enterprise security operations by maintaining scanning infrastructure, executing vulnerability and compliance assessments, analyzing scan results, validating findings, and providing actionable remediation guidance to system owners, information system security teams, and government leadership. This role requires a strong understanding of DISA security requirements, Risk Management Framework (RMF) processes, and classified network security operations.

 

• Minimum of 8 years with BS/BA; Minimum of 6 years with MS/MA; Minimum of 3 years with PhD., 12 years with a HS Diploma
• Demonstrated experience administering and operating ACAS using Tenable Security Center and Nessus.
• Experience managing enterprise vulnerability scanning operations across large, distributed, and segmented network environments.
• Hands-on experience configuring scan policies, managing scan zones and repositories, maintaining scanner connectivity, and troubleshooting scan failures.
• Demonstrated ability to analyze vulnerability and compliance findings, validate results, identify false positives, and develop practical remediation recommendations.
• Experience producing vulnerability reports, compliance summaries, dashboards, and technical briefings for government customers and senior leadership.
• Understanding of the Risk Management Framework, continuous monitoring, vulnerability remediation tracking, and security authorization processes.
• Ability to communicate technical findings clearly to system administrators, security personnel, program stakeholders, and government leadership.
• Ability to work independently and collaboratively in a mission-focused, security-conscious government contracting environment.
• US Citizen with Department of Energy clearance

• Experience supporting Department of Energy (DOE) or National Laboratory enterprise environments.
• Experience leading ACAS operations, coordinating scanner maintenance, establishing enterprise scanning procedures, and providing technical direction to other cybersecurity personnel.
• Familiarity with DISA eMASS, Host-Based Security System (HBSS), and Enterprise Security Solutions (ESS).

$135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. By applying to this job, you are expressing interest in the role and the Company. During the review of your application, you may be required to participate in an on-camera interview, as well as participate in a process to verify your identity. Use of artificial intelligence (AI) tools of any kind during Peraton interviews is strictly prohibited unless the candidate has obtained prior written authorization. All interview responses must be the candidate’s own.

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.