About Us

AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors. Prioritizing innovation and client-focused solutions, we assist major agencies in addressing intricate issues and ensuring a more secure future.

We are seeking a highly skilled and proactive STIG Writer / Vulnerability Assessor to develop, maintain, and support security configuration guidance in alignment with DoD and federal cybersecurity standards.

This position blends technical expertise with advanced writing and documentation skills, enabling the creation of authoritative security guidance that supports compliance, strengthens cybersecurity posture, and drives mission success. The candidate will lead vulnerability assessment activities—designing and executing assessment plans, validating configuration settings against SRG/STIG criteria, analyzing scan results, quantifying risk/severity, and translating findings into prioritized, actionable security recommendations. The role also requires the ability to collaborate with vendors, engineering teams, and DoD stakeholders to ensure security requirements and assessments are clear, practical, repeatable, and enforceable.

This is a remote position; however, individuals must reside within a commutable distance of Chambersburg, PA to support occasional onsite meetings as required.

Responsibilities Include:

Conduct vulnerability assessments using open-source tools (e.g., OpenVAS, OWASP ZAP, Nmap, and Trivy).
Report on the vulnerability assessment of a product before and after a STIG is applied.
Monitor and integrate emerging open-source vulnerability scanning practices and tools into assessment processes.
Develop, maintain, update and support security configuration guidance based on applicable DoD policies, DoD Instructions and Manuals, NIST 800-53 controls, CNSS-1253 baselines, and best business practices.
Develop test plans, test and document configuration settings. Install products in test lab, analyze product features and functions, test configurable settings.
Identify vulnerabilities in software, hardware and network products. Identify corresponding methods of mitigating or eliminating vulnerabilities.
Create and conduct briefings outlining test findings. Perform ad-hoc risk analysis. Represent team on working group assignments and consensus development efforts.
Respond to inquiries related to NIST 800-53 control requirements.

Required Skills, Qualifications, and Experience:

Bachelor’s degree or equivalent experience.
5+ years of relevant professional experience.
Must have and maintain a current DoD Secret clearance.
Must have and maintain a current DoD IAT Level II (e.g., Security+ CE or equivalent) certification
Hands-on experience with applications, operating systems and/or networking equipment.
Knowledge of different types of malicious software operation, common attack vectors, best security practices and security risk identification and mitigation.
Knowledge/experience with vulnerability testing tools and their operation. Knowledge of NIST 800-53 controls coupled with ability to evaluate security controls and apply them to commercial product features, functions and settings. Ability to work with vendors and drive product improvements based on testing results.
Proficiency with MS Office products including Excel and Word. Experience with creating and conducting PowerPoint presentations to leadership.
Must have the ability to work in a team environment, the desire to learn and the drive to succeed.

Preferred Qualifications:

Preferred Certification: 8140.1: Security+/CASP+ CE CCSP (Certified Cloud Security Professional) – CSSP Analyst / Infrastructure Support (cloud focus) CompTIA Cloud+ – CSSP Infrastructure Support baseline cert CSSLP (Certified Secure Software Lifecycle Professional)

Work Environment and Physical Demand:

Prolonged periods of sitting and working at computer.

Compensation: $90,000 - $105,000

This posting is part of a pipeline for future opportunities supporting the current PDOS contract. Employment is contingent upon position availability and government customer approval. AGE Solutions is actively engaging talent and encourages incumbents and new candidates to express interest to be considered if/when opportunities may become available.

At AGE Solutions, we reward performance, invest in growth, and share success. Our benefits support the whole person, professionally, financially, and personally.

26 Days Paid Leave: Includes vacation, sick, personal time, and holidays. You choose how to use it.
Performance Bonuses: Performance bonuses are awarded based on individual contributions and company-wide results, aligning recognition with impact.
401(k) with Match: We match 3% of your contributions with immediate vesting.
Financial Protection: Company-paid life insurance up to $300K and options for additional coverage for you and your dependents.
Health Benefits: Multiple medical plans, dental, vision, FSA and HSA options to fit your needs.
Parental Leave: 15 days of fully paid leave for new parents, because family matters.
Military Differential Pay: We bridge the gap for employees on active duty, so they don’t take a financial hit while serving.
Professional Growth: Paid training and certifications, tuition reimbursement, and the tools and tech to get the job done right.
Shared Success: In the event of a company sale, our CEO has committed to returning 80% of net proceeds to employees. This ensures our team shares in the long term value they help create.

At AGE, you’ll do work that matters, supported by a company that delivers for its people.