Job Description Position Summary ECS is seeking a
SOC-Vulnerability Management AESS Technician - Junior to support the Army National Guard (ARNG) Enterprise Network Operations and Cybersecurity Support (ENOCS) program in
Fairfax, VA. This position supports Task 3 - Cybersecurity Operations Support, which delivers Defensive Cyberspace Operations - Internal Defensive Measures (DCO-IDM) across the DoDIN-Army-NG area of responsibility. The role executes endpoint security scanning and compliance validation using AESS tools, verifies endpoint coverage and scan accuracy, analyzes vulnerability and compliance findings, documents results with supporting evidence, and coordinates remediation with system owners and endpoint administrators. This technician contributes directly to ENOCS cybersecurity operations by helping maintain secure, compliant endpoint posture and by supporting the broader SOC, vulnerability management, and RMF workflows used across the program.
Please Note: This position is contingent upon contract award.
In this role, the selected candidate will help protect ARNG classified and unclassified network environments that support more than 120,000 users and approximately 141,000 endpoints across roughly 2,800 sites in 54 states and territories. The position supports mission systems and operations tied to Title 10 and Title 32 missions, mobilization readiness, domestic emergency response, and classified SIPRNet operations. Within the ENOCS technical environment, the technician will support continuous monitoring and compliance activities aligned to AESS, USIEM-integrated cybersecurity operations, eMASS record maintenance, POA&M tracking, and ARNG requirements for STIG, IAVM, and RMF-based vulnerability management in coordination with the larger cyber operations enterprise.
Responsibilities - Execute endpoint vulnerability scanning and compliance validation activities using AESS tools across supported ARNG enterprise environments.
- Verify endpoint coverage, scan configurations, and data integrity to ensure accurate vulnerability and compliance assessment results.
- Analyze scan findings to identify vulnerabilities, security misconfigurations, and compliance gaps affecting supported systems and endpoints.
- Document vulnerability assessment results with supporting evidence and maintain accurate records in vulnerability tracking systems and POA&Ms.
- Coordinate remediation actions with system owners, endpoint administrators, and other stakeholders to address identified security weaknesses and configuration issues.
- Perform follow-up validation to confirm corrective actions have been implemented and that residual risk status is accurately reflected.
- Support continuous monitoring activities aligned with STIGs, IAVMs, RMF requirements, and ARNG cybersecurity objectives for classified and unclassified enclaves.
- Contribute to Task 3 deliverables by supporting vulnerability management and secure baseline configuration efforts across the DoDIN-A(NG) environment.
- Interface with broader SOC and cybersecurity operations processes that integrate AESS endpoint security activities with USIEM-driven monitoring, analysis, and reporting.
- Support cybersecurity operations conducted in coordination with the NETCOM Global Cyber Center and DISA DCDC by providing accurate vulnerability data, evidence, and status updates for enterprise reporting and risk management.
Required Skills Required Qualifications U.S. Citizenship is required
Security Clearance: Secret Eligible
Required Certifications: DCWF Work Role 541-Vulnerability Assessment Analyst - Basic proficiency; must hold ONE OR MORE of the following: CEH
Experience: 3+ years of experience in cybersecurity
- Experience performing endpoint security scanning, compliance validation, and vulnerability analysis in enterprise environments.
- Ability to identify, document, and track vulnerabilities, misconfigurations, and compliance gaps with supporting technical evidence.
- Experience coordinating remediation activities with system owners and endpoint administrators and validating completion of corrective actions.
- Working knowledge of STIGs, IAVMs, POA&M management, and RMF-aligned continuous monitoring practices.
- Ability to maintain accurate vulnerability status records and support reporting for cybersecurity operations and compliance activities.
- Experience supporting cybersecurity operations in classified and unclassified network environments.
Desired Skills Desired Qualifications Security Clearance: Active Secret (preferred)
- Experience supporting Army, ARNG, or other DoD cybersecurity operations programs.
- Familiarity with AESS-supported endpoint security activities in large, geographically distributed enterprise environments.
- Experience working with eMASS records, security artifacts, and ongoing authorization support activities.
- Exposure to USIEM-enabled monitoring, SOC workflows, or enterprise cyber operations reporting.
- Experience supporting vulnerability management activities for environments spanning NIPRNet and SIPRNet operations.
ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.
Everforth ECS is the federal segment of
Everforth , a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.
Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.
We value:
- Attracting and developing top talent and high-performing teams
- Fostering a culture that is engaging, accountable, and mission-driven
Never miss an opportunity! Create an alert based on the job you applied for.