Cybersecurity Engineer 5 - Vulnerability Management / ACAS Engineer
Search Results · Columbus, OH
—
Jul 3, 2026
Columbus, OH
Jul 20, 2026
What this job asks for AI summary
A senior cybersecurity engineering role centered on vulnerability management within a large federal operational environment. Day-to-day work involves administering enterprise vulnerability scanning platforms — including ACAS — running scanning operations, analyzing results, and producing dashboards and reports to support risk management and remediation planning. Suited to candidates with at least seven years of cybersecurity experience, a DoD Secret clearance, and prior ACAS administration in a DoD setting.
Senior level · 7+ years · Columbus, OH · Secret clearance · Full-time
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $125,296 (middle half $100,145–$157,662).
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (8)
The posting lists two possible work locations — Columbus, OH and Richmond, VA (government site); Columbus, OH is used as the primary CBSA. Hiring managers should note candidates may be placed at either site.
Employment is explicitly contingent upon contract award; the start date is uncertain.
The title 'Cybersecurity Engineer 5' suggests an internal seniority level (level 5), but the posting provides no explicit mapping to Junior/Mid/Senior/etc. The 7-year overall experience requirement and 4-year DoD-specific requirement support a Senior classification.
DoD 8570/8140 IAT Level III and CND-IS are compliance certification requirements (e.g., CISSP, CASP+, CISA for IAT III; CEH or equivalent for CND-IS), not specific product skills, but are listed as hard gates in the Minimum Qualifications section.
ACAS Administrator certification and 4+ years of ACAS/vulnerability scanning experience in a DoD environment are both hard-gated in Minimum Qualifications; the 4-year figure applies to both the ACAS skill and the broader vulnerability scanning requirement.
Continuous monitoring and cybersecurity risk management appear in the responsibilities narrative rather than the Minimum Qualifications section and are treated as preferred/contextual.
Ignored 3 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): DoD 8570/8140 IAT Level III, DoD 8570/8140 CND-IS, cybersecurity risk management.
Requires a Secret clearance — the cleared population is a small fraction of this occupation, so the real candidate pool is materially smaller than the estimate below, which does not model clearance.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.