Vulnerability Management Engineer
About The Position
The Vulnerability Management Engineer supports the NATO SOFCOM mission by providing enterprise vulnerability assessment, validation, prioritization, remediation coordination, and evidence management. The role administers Tenable Security Center/Tenable.sc, Nessus Managers, scanners, and agents; plans and performs authorized scans; validates findings; and coordinates remediation with technical teams. The engineer maintains vulnerability-management records and reporting, integrates approved reports with ServiceNow, and supports urgent or zero-day assessments and inspections. The position is full-time and onsite in Mons, Belgium.
Requirements
- At least 5 years of related experience.
- Bachelor of Arts or Bachelor of Science; additional years of experience may be used in lieu of the degree requirement.
- Technical skills in Tenable, Nessus, vulnerability management, and POA&M documentation.
- Active Secret clearance required to start.
- U.S. citizenship required.
- IAT Level II or higher certification.
- Tenable Certified Professional or Certified Ethical Hacker certification.
- ITIL Foundation certification within 90 days of hire.
- Meet the Belgian SOFA requirement; the review process takes 6–12 weeks and is submitted to the Belgian government by GDIT on the applicant’s behalf after selection.
Responsibilities
- Administer Tenable Security Center/Tenable.sc, Nessus Managers, Nessus scanners, and agents, including credentialed and non-credentialed assessments.
- Plan and perform authorized vulnerability scans, verify findings, analyze false positives, and identify assets requiring special handling.
- Prioritize vulnerabilities using CVSS, EPSS, CISA KEV, exploit context, and documented mission impact; leave risk acceptance to Government officials.
- Coordinate remediation plans with systems, endpoint, network, and application teams and verify findings after approved fixes.
- Maintain POA&Ms, aging reports, technical remediation registers, service dashboards, and accreditation evidence.
- Integrate approved vulnerability reporting with ServiceNow and support urgent or zero-day assessments and inspections.
Benefits
- Comprehensive benefits and wellness packages.
- 401(k) with company match.
- Competitive pay and paid time off.
- Career growth tool and learning opportunities.
- Internal mobility support.
- For U.S.-based employees: medical plan options, including plans with Health Savings Accounts; dental and vision plans; paid vacation, sick and personal time, holidays, and paid parental, military, bereavement, and jury duty leave; short- and long-term disability benefits; life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
