** Active DoD Secret clearance (or ability to obtain and maintain an interim Secret clearance prior to start) **

At The One 23 Group, our mission is to set the benchmark for excellence in government services. We empower our clients in the Department of Defense (DoD), Intelligence Community, and Federal Civilian sectors to excel through advanced technical capabilities and dedicated mission support. Our foundation rests on a people-first culture, integrity, and proactive problem-solving.

The Defense Commissary Agency (DeCA) operates under the operational direction of Joint Force Headquarters–Department of Defense Information Network (JFHQ-DoDIN) and United States Cyber Command (USCYBERCOM) to defend and sustain the Department of Defense Information Network as a Tier-1 DoDIN Area of Operations (DAO). DeCA upholds rigorous compliance standards, including the Federal Information Security Modernization Act (FISMA), Payment Card Industry Data Security Standard (PCI-DSS), and the NIST Risk Management Framework (RMF).

The Information Security Analyst (Senior) is part of a dedicated technical remediation team supporting the Desktop Common Operating Environment (DCOE). In this role, you will receive scan findings and government-directed POA&M work orders, analyze technical requirements, and coordinate directly with desktop and systems administrators to implement fixes, remediate non-compliant STIG configurations, resolve IAVMs, and deliver verification artifacts back to government stakeholders.

Primary Responsibilities

• Vulnerability  Ingestion & Triage: Review and analyze vulnerability scan reports  (ACAS/Tenable) and compliance exports provided by government scanning  personnel; prioritize actions based on severity (CAT I/II/III, CVSS, and  IAVM timelines).
• POA&M  Work Order Execution: Receive, review, and execute technical work orders  and corrective taskings tied to government-established Plans of Action and  Milestones (POA&Ms); implement the necessary technical fixes to  resolve underlying weaknesses.
• Hands-on Technical Remediation: Collaborate with Desktop Common Operating  Environment (DCOE) administrators and systems engineers to remediate  vulnerabilities through patch deployment, registry adjustments, Group  Policy (GPO) configuration, and operating system baselines.
• STIG  Remediation & Hardening: Review DISA Security Technical Implementation  Guide (STIG) and SCAP compliance findings; implement technical controls on Windows endpoints and document remediation actions or technical hurdles.
• Remediation  Artifact Collection: Gather, format, and provide technical artifacts, test results, and objective evidence to government personnel (ISSM/ISSO) to  support government validation and closure of POA&M items.

Secondary Responsibilities

• Pre-Scan  Validation & Coordination: Conduct local verification to confirm that  patches, GPO modifications, and hardening scripts applied properly prior  to requesting government re-scans.
• IAVM  Tracking & Work Order Alignment: Track Information Assurance  Vulnerability Management (IAVM) notices against assigned remediation work  orders, ensuring timely implementation within required operational  windows.
• Ticket  Management & Work Order Tracking: Maintain accurate, up-to-date   documentation on remediation activities and status updates inside  enterprise ticketing systems (e.g., ServiceNow, BMC Remedy, Ivanti).
• Endpoint  Protection Support: Coordinate with endpoint administrators to ensure  McAfee/Trellix Endpoint Security Solutions (ESS) agents are healthy and      updated on target endpoints throughout remediation cycles.

Required Knowledge & Skills

•  Ability  to read, interpret, and prioritize vulnerability scan reports generated by  ACAS (Tenable Nessus) and SCAP/SCC tools.
• Experience  executing remediation work orders and tracking remediation tasks tied to  government POA&Ms.
• Practical  technical experience remediating cybersecurity findings in a Windows  enterprise computing environment (e.g., GPO modifications, registry  updates, script execution, and patch verification).
• Strong  working knowledge of DISA STIGs, SRGs, and associated checklist formats  (.ckl).
• Familiarity  with DoD cybersecurity concepts, the DoD IAVM program, vulnerability  categorization (CAT I, II, III), and CVSS scoring.
• Experience compiling objective remediation evidence and artifacts (e.g., command  outputs, screenshots, configuration logs) for government validation.
• Working  knowledge of enterprise ITSM/ticketing systems (e.g., ServiceNow, BMC Remedy, Ivanti) to track work orders and milestones.
• Basic understanding of Public Key Infrastructure (PKI) and endpoint protection tools (ESS/HBSS).
• Strong  written and verbal communication skills for effective coordination with  system administrators, engineering teams, and government leads.

Clearance Requirement

Active DoD Secret clearance (or ability to obtain and maintain an interim Secret clearance prior to start).

Education & Experience

• Bachelor’s   degree (required) plus Five (5) years of relevant experience.
• DoD   8140 Foundational Certification (Required): Active certification (CEH(P),  RCCE Level 1, Cloud+, CPTE, FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC,  PenTest+, or Security+).
• Computing  Environment Training (Required or obtainable post-hire): Training in  ACAS/EMASS.
• ITIL v4 Foundation certification (preferred / obtainable post-hire).

Equal opportunity employer, including disability/vets.