Nessus Security Tool Engineer

CACI International • Chantilly, VA

318d • $85,800 - $180,200

About The Position

CACI is looking for a Security Tool Engineer to support our DoD customer to implement an enterprise IT service delivery model that provides consistent, secure, high-quality, and cost-effective services to enable mission success and improve end user experience across the customer environment. On this program, CACI will deliver enhanced capabilities and services to implement and operate an enterprise ITSM solution, enterprise service desk, endpoint management and security solution, as well as CONUS/OCONUS field support and life cycle support for end user devices to enable the DoD customer to transition focus from IT operations to mission operations. As a Security Tool Engineer, you will be responsible for designing, implementing, and maintaining security tools and technologies to enhance the organization's cybersecurity posture. Your primary focus will be on evaluating, deploying, configuring, and optimizing various security solutions to protect critical systems and data from cyber threats. You will work closely with the cybersecurity team, IT staff, and other stakeholders to ensure the effective operation of security tools and their integration into the organization's infrastructure. This is for SIPRNet and the work is 100% on site in Chantilly, VA. No remote hybrid schedules.

Requirements

• Bachelor’s Degree in relevant field and 5 years of relevant experience
• Active Secret Clearance
• Proven experience as a Nessus-Tenable Security Tool Engineer or in a similar role, with hands-on experience in deploying and managing security tools
• In-depth knowledge of the following security technologies: Nessus Tenable (ACAS), Microsoft Defender for Endpoint, and STIG Management
• Familiarity with network and system security principles, protocols, and configurations
• Strong analytical and problem-solving skills to troubleshoot and resolve complex security tool issues
• Excellent communication and collaboration skills to work effectively with cross-functional teams
• Understanding of industry compliance standards (e.g., NIST) and relevant regulations (e.g., GDPR, HIPAA) is advantageous
• Willingness to stay updated with the latest cybersecurity trends and emerging security tools

Nice To Haves

• Required DoD 8140 compliant certification such as CompTIA Security+
• Other relevant cybersecurity certifications like Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM), are a plus

Responsibilities

• Installing and Configuring Nessus, Nessus Manager, Nessus Agents, Log Correlation Engine, Nessus Network Monitor, and Security Center on both Linux/Unix and Windows based environments
• Responsible for installing and configuring Nessus Agents
• Secure Tenable server and Enable TLS
• Integrating Tenable products with LDAP, Active Directory, and CyberArk
• Responsible for the creation of tenable Organizations, Repositories, and Scan Zones
• Responsible for local and LDAP based user management
• Responsible for configuring tenable plugins/feeds and adding audit files
• Responsible for licensing the product both online and offline
• Responsible for adding scan policies, audit policies, and credentials to Security Center, and Nessus Manager
• Responsible for configuring Nessus Manager scan pulls to Security Center
• Defining scan policies and audit policies
• Adding scan credentials
• Scheduling scans
• Generating Scan Reports
• Importing/uploading scan reports for Vulnerability
• Analysis and validation of the scan results

Benefits

• Healthcare
• Wellness programs
• Financial benefits
• Retirement plans
• Family support
• Continuing education
• Time off benefits

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Bachelor's degree