Vulnerability Assessment Analyst, Mid-Level

Independent Software•Columbia, MD

23h

About The Position

As a Mid-Level Vulnerability Assessment Analyst at Independent Software, you will support vulnerability management and continuous monitoring activities across secure enterprise environments. You will administer and optimize Tenable Security Center and Nessus infrastructure, conduct vulnerability assessments, analyze scan results, and work with technical teams to identify and remediate security risks. This role requires strong hands-on experience with vulnerability scanning, Linux and Windows systems, STIG compliance, and security assessment technologies.

Requirements

Experience administering and supporting Tenable Security Center and Nessus
Experience conducting vulnerability assessments and analyzing Nessus/ACAS scan results
Experience identifying and remediating STIG findings and system vulnerabilities
Strong Linux and Windows security administration experience
Experience configuring vulnerability scanning policies and asset lists
Knowledge of continuous monitoring and vulnerability management processes
Experience tracking vulnerability remediation and reporting results
Strong analytical, troubleshooting, documentation, and communication skills
Current CISSP certification or higher-level qualifying certification is required
Must possess an active TS SCI with appropriate Polygraph to be considered for this role

Responsibilities

Maintain and optimize Tenable Security Center infrastructure
Perform vulnerability assessments and continuous monitoring using Tenable Security Center and Nessus
Install, configure, patch, and maintain Tenable Security Center and Nessus on Linux and Windows systems
Configure and fine-tune scanning policies, asset lists, and vulnerability scanning activities
Review and analyze Nessus/ACAS scan results to identify vulnerabilities and potential security concerns
Mitigate STIG findings and vulnerabilities on Security Center and Nessus scanning servers
Analyze scan results and develop clear vulnerability assessment reports
Monitor and track vulnerability remediation through resolution
Collaborate with information systems security and technical teams to support timely remediation
Maintain accurate vulnerability and security records
Communicate security posture, vulnerabilities, and potential risks to technical teams, management, and stakeholders