Vulnerability Assessor

ASRC Federal is a leading government contractor furthering missions in space, public health and defense. As an Alaska Native owned corporation, our work helps secure an enduring future for our shareholders. Join our team and discover why we are a top veteran employer and Certified Great Place to Work™


ASRC Federal is seeking a Vulnerability Assessor to support a DoDEA client in assessing and identifying vulnerabilities in new and existing solutions.
Vulnerability Assessor
ASRC Federal is seeking a Vulnerability Assessor to support the Department of Defense Education Activity (DoDEA) Enterprise Cyber Program. The Vulnerability Assessor will be responsible for identifying, evaluating, and categorizing vulnerabilities in both new and existing systems. This role plays a critical part in improving the cybersecurity posture of DoDEA by implementing robust assessment practices and working collaboratively with other cybersecurity teams.
Responsibilities
• Utilize cybersecurity assessment tools to evaluate commercial and government off-the-shelf products.
• Categorize and assess vulnerabilities using recognized benchmarks and frameworks.
• Generate detailed assessment reports with remediation recommendations.
• Collaborate with Information System Security Officers (ISSOs) to develop Plans of Action and Milestones (POA&Ms).
• Develop and maintain techniques for cybersecurity assessment of emerging technologies.
Basic Qualifications
• Minimum of 2 years of cybersecurity experience
• Bachelors Degree(4 years of additional experience may substitute in lieu of)
• Active Secret Clearance required.
• CISSP certification or ability to within 30 days of hire.
• Working knowledge of vulnerability management tools (e.g., Tenable).
• Technical expertise in core cybersecurity technologies.
• Strong analytical and problem-solving skills.
• Excellent verbal and written communication skills.
• Familiarity with vulnerability scanning and risk assessment methodologies.
Preferred Qualifications
• Positive attitude with practical cybersecurity experience.
• Understanding of common cybersecurity threats and attack vectors.
• Familiarity with DoD/Federal secure configuration baselines.
• Knowledge of NIST SP 800-53 and the Risk Management Framework (RMF).


We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law.

EEO Statement
ASRC Federal and its Subsidiaries are Equal Opportunity employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identification, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law.