Endpoint Security Engineer III

RISA•Springfield, VA

4d•$117,000 - $128,000•Onsite

About The Position

RISA is hiring a senior Endpoint Security Engineer to install, operate, and tune the Tenable Suite—including Security Center, Nessus Scanners, and Nessus Managers—on Linux across a large, global network supporting an Intelligence Community customer. This is a hands-on administrator role on a long-term program, working with an engineering team. The position is based 100% onsite in Springfield, Virginia, with up to 10% local travel. An active TS/SCI clearance and U.S. citizenship are required to start; a Government polygraph is required after hire. The role includes maintaining the Tenable environment and other security products on Linux, conducting enterprise vulnerability assessments, analyzing and prioritizing findings, coordinating remediation, reporting results, supporting users, and responding to security alerts and incidents. The annual salary range is $117,000–$128,000.

Requirements

Active TS/SCI clearance and ability to pass and maintain a Government polygraph after hire.
U.S. citizenship.
Current DoD 8570/8140 IAT Level II certification, such as Security+ CE or higher.
Ability to obtain a CSSP Infrastructure Support certification within six months of hire.
Bachelor's degree in Engineering, Computer Science, or a related field and ten years of technical cybersecurity experience; additional experience may be considered in lieu of a degree.
Hands-on administrator experience with the Tenable Suite: Security Center, Nessus Scanners, and Nessus Manager.
Strong Linux skills, including installation, configuration, maintenance, and hardening.
Experience working on large-scale enterprise or global networks in a fast-paced environment.
Understanding of the DoD Architecture Framework and DoD network architecture and strategic planning guidance.
Experience planning, designing, and evaluating security systems and architectures.
Experience delivering status reports and products to senior management and customers.

Nice To Haves

CSSP Infrastructure Support certification.
Linux certification such as RHCSA, RHCE, or Linux+.
Scripting experience for automation using Python, Bash, or PowerShell.
Experience hardening Linux to DISA STIGs.

Responsibilities

Install, configure, and maintain Tenable Security Center, Nessus Scanners, and Nessus Managers on Linux platforms.
Run regular vulnerability scans and assessments across the enterprise network.
Analyze scan results and prioritize vulnerabilities by severity and impact.
Work with IT and security teams to remediate findings.
Produce and distribute vulnerability reports to stakeholders and senior management.
Monitor security alerts and respond to incidents promptly.
Train and support users on Tenable products.
Maintain the performance and security of the Tenable environment, and install and configure other security products on Linux.
Stay current on emerging threats and vulnerabilities.