Information Assurance (IA) Security Administrator Support Services | Vulnerability Assessment Analyst

Information Assurance (IA) Security Administrator | Vulnerability Assessment Analyst

Location: San Antonio, TX

Clearance Required: Public Trust (ADP/IT-II); Tier 3 Investigation (NACLC)

Program Overview

The Defense Health Agency’s Domain and Directory Services Branch (DDSB) supports the global IT infrastructure that underpins medical readiness for the Army, Navy, and Air Force. This includes sustaining both on-premise and cloud-based environments serving over 200,000 users and 250,000 end-user devices across 250 sites worldwide. DDSB manages core identity, access, and directory services essential to mission-critical healthcare delivery within the Military Health System. Team members contribute to a broad range of IT operations and modernization efforts that directly impact service members, veterans, and their families. This is a high-impact environment supporting both peacetime healthcare and wartime readiness across the DoD medical enterprise.

Summary

Vulnerability Assessment Analyst executes vulnerability scanning, compliance checks, and remediation tracking in support of DHA cybersecurity readiness and operational assurance.

Key Responsibilities

• Perform scheduled and ad hoc vulnerability scans using tools like ACAS (e.g., Nessus), SCAP, and SCC.
• Analyze scan results and produce vulnerability reports with mitigation recommendations.
• Support Information Assurance Vulnerability Alert (IAVA) compliance tracking and reporting.
• Coordinate with system administrators and cybersecurity personnel to address findings.
• Maintain accurate logs, dashboards, and documentation to support audits and inspections.

Qualifications

• Experience with DoD cybersecurity tools (ACAS, STIGs, eMASS).
• Vulnerability management experience or IA operations in a DoD environment.

Education & Certification Requirements (per DoD 8140 Qualification Matrices)

Any of the following...

• Academic Education: Bachelor’s degree in information technology, Cybersecurity, or a related discipline.
• OR Baseline: GLSC or CISSP