Vulnerability Management Engineer (Tenable/Nessus, Linux)

RISA•Springfield, VA

6d•Onsite

About The Position

RISA is hiring a senior Endpoint Security Engineer to administer the Tenable Suite on Linux across a large, global network supporting an Intelligence Community customer. The role involves installing, operating, and tuning Tenable Security Center, Nessus Scanners, and Nessus Managers as part of a long-term program, working alongside an engineering team. The position is based 100% onsite in Springfield, Virginia, requires an active TS/SCI clearance and U.S. citizenship, and requires the ability to pass and maintain a government polygraph after hire. Travel is up to 10%, local.

Requirements

Active TS/SCI clearance and ability to pass and maintain a government polygraph after hire.
U.S. citizenship required.
Current DoD 8570/8140 IAT Level II certification, such as Security+ CE or higher.
Ability to obtain a CSSP Infrastructure Support certification within six months of hire.
Bachelor's degree in Engineering, Computer Science, or a related field plus ten years of technical cybersecurity experience; additional experience may be considered in lieu of a degree.
Hands-on administrator experience with Tenable Security Center, Nessus Scanners, and Nessus Manager.
Strong Linux installation, configuration, maintenance, and hardening skills.
Experience working on large-scale enterprise or global networks in a fast-paced environment.
Understanding of the DoD Architecture Framework, DoD network architecture, and strategic planning guidance.
Experience planning, designing, and evaluating security systems and architectures.
Experience delivering status reports and products to senior management and customers.

Nice To Haves

CSSP Infrastructure Support certification.
Linux certifications such as RHCSA, RHCE, Linux+, or similar.
Scripting experience for automation using Python, Bash, or PowerShell.
Experience hardening Linux to DISA STIGs.

Responsibilities

Install, configure, and maintain Tenable Security Center, Nessus Scanners, and Nessus Managers on Linux platforms.
Run regular vulnerability scans and assessments across the enterprise network.
Analyze scan results and prioritize vulnerabilities by severity and impact.
Work with IT and security teams to remediate findings.
Produce and distribute vulnerability reports to stakeholders and senior management.
Monitor security alerts and respond promptly to incidents.
Train and support users on Tenable products.
Maintain the performance and security of the Tenable environment, and install and configure other security products on Linux.
Stay current on emerging threats and vulnerabilities.