Vulnerability Assessment Analyst - Information Systems Security Engineer

CACI • Annapolis Junction, MD

4d • Onsite

About The Position

CACI is seeking a highly skilled Systems Security Engineer to work on-site in Annapolis Junction, MD, supporting enterprise vulnerability management and cybersecurity operations. The ideal candidate will have hands-on experience with Tenable Security Center and Nessus, Linux and Windows environments, vulnerability assessments, STIG remediation, and continuous security monitoring. This role requires a strong understanding of system and application vulnerabilities, excellent analytical skills, and the ability to work independently while collaborating effectively with ISS and other technical teams.

Requirements

• Bachelor's degree with 7 years of experience.
• DoD 8570 IAT Level II certification requirements.
• CEH or CompTIA Security+ CE certification.
• Hands-on experience with enterprise vulnerability management and scanning solutions, particularly Tenable/Nessus.
• Familiarity with DISA STIGs, Tenable Audit Files, and/or CIS Benchmarks.
• Knowledge of system and application security threats, vulnerabilities, and remediation practices.
• Working knowledge of Linux/Unix and Windows administration.
• Experience with patch deployment and system configuration.
• Understanding of networking and enterprise IT environments.
• Strong analytical, troubleshooting, and problem-solving skills with exceptional attention to detail.

Nice To Haves

• In-depth knowledge of vulnerability assessment methodologies, tools, and industry best practices.
• Experience managing vulnerability remediation across complex enterprise environments.
• Ability to independently manage assignments and take ownership of tasks from initiation through completion.
• Demonstrated ability to collaborate effectively with ISS, engineering, and other technical teams.
• Strong communication skills with the ability to clearly present technical findings and security risks to management and stakeholders.

Responsibilities

• Maintain, optimize, and administer the Tenable Security Center infrastructure and associated scanning environments.
• Conduct security patching, vulnerability assessments, and Nessus scans across Linux Security Center servers and Windows/Linux scanning servers.
• Install, configure, maintain, and update Tenable Nessus and Tenable Security Center software.
• Configure and fine-tune scanning policies, asset lists, and security configurations to provide comprehensive vulnerability coverage.
• Perform vulnerability assessments across multiple device types and operating systems using Tenable Security Center.
• Conduct continuous monitoring of customer assets using Nessus to identify and evaluate security vulnerabilities.
• Review and analyze Nessus/ACAS scan results, including successful, unsuccessful, and potential scan results.
• Identify and support remediation of DISA STIGs and system vulnerabilities across Tenable servers and scanning infrastructure.
• Analyze vulnerability data and prepare clear, comprehensive reports for management and technical stakeholders.
• Monitor and track vulnerability remediation activities to support timely resolution.
• Collaborate with ISS and other technical teams to address vulnerabilities and strengthen the customer's security posture.
• Communicate security risks, assessment findings, and remediation status to stakeholders.
• Maintain accurate records of vulnerabilities, security activities, and related findings.

Benefits

• flexible time off
• robust learning resources
• competitive compensation
• benefits and learning and development opportunities
• comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits

What This Job Offers

• Job Type: Part-time
• Career Level: Senior