Conducting and coordinating security compliance assessments using tools and processes such as ACAS/Nessus, Security Content Automation Protocol (SCAP), DISA STIGs, and applicable endpoint protection and security monitoring solutionsReviewing vulnerability assessment results, security findings, configuration compliance, patch status, and other security metrics; coordinating corrective actions with system owners, system administrators, ISSEs, engineers, and developers. Demonstrated experience managing POA&Ms from identification through closure, including documenting findings and risks, developing and tracking remediation milestones, coordinating corrective actions with system administrators, Information Systems Security Engineers (ISSEs), engineers, and developers, validating closure evidence, monitoring due dates, and escalating overdue or unresolved findings.