Security Engineer, Vulnerability Management (ACAS/Tenable.sc) - Secret clearance
About The Position
PGTEK is seeking a Security Engineer, Vulnerability Management with a Secret clearance (or higher) to administer and optimize our Tenable.sc/ACAS environment, drive vulnerability remediation across enterprise systems, and support compliance with DoD STIG and RMF requirements. This is a hands-on role that combines deep Tenable platform expertise with Windows/Linux administration, vulnerability analysis, system hardening, and cross-team collaboration. The ideal candidate will have experience working in a DoD or federal environment and be comfortable managing vulnerability scanning and remediation across complex enterprise environments.
Requirements
- 5+ years of experience in vulnerability management, information assurance, or systems security, preferably within a DoD or federal environment.
- Hands-on experience administering Tenable.sc, Nessus, and ACAS in a DoD or federal environment.
- Working knowledge of DoD STIGs, CKLs, and RMF processes.
- Strong Windows and Linux administration experience.
- Active DoD Secret clearance required; clearance must be current and verifiable.
- DoD 8570/8140 IAT Level II baseline certification required, such as: CompTIA Security+ CE, CySA+, GSEC, SSCP, CCNA-Security
- Strong written and verbal communication skills with the ability to collaborate effectively across technical teams.
Responsibilities
- Administer and optimize Tenable.sc and Nessus, including scan policies, scan zones, repositories, credentials, and audit files.
- Perform credentialed vulnerability scans, STIG compliance scans, discovery scans, and port scans.
- Analyze and interpret STIGs, CKLs, ACAS/Tenable findings, and vulnerability results to support compliance and risk reduction.
- Leverage Windows and Linux administration skills to support and troubleshoot authenticated vulnerability scanning.
- Conduct false-positive analysis and validation to ensure accurate vulnerability reporting.
- Collaborate with Cloud, Network, Platform, Security, and Engineering teams to drive vulnerability remediation and system hardening.
- Identify and close gaps in vulnerability scan coverage to ensure comprehensive visibility across the environment.
- Perform asset discovery and maintain accurate inventories to ensure all in-scope systems are included in scanning cycles.
- Analyze scan results to identify coverage gaps, unscanned assets, and compliance blind spots.
- Recommend corrective actions to improve vulnerability visibility, scanning effectiveness, and overall security posture.
Benefits
- Comprehensive PPO medical coverage with access to a Health Savings Account (HSA) option
- Vision plan
- Dental insurance with the base dental plan option paid for by PGTEK
- Life Insurance
- Short and Long-Term disability
- Critical Illness insurance
- Matching 401(k) plan
- Discount on pet insurance through ASPCA Pet Insurance
- Employee Assistance Program
- Generous amount of PTO and Holidays
- Education Assistance Program is available after 12 months of employment
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
