Reduce Risk. Accelerate Remediation. Strengthen Infrastructure Security. This role focuses on identifying, prioritizing, tracking, and remediating vulnerabilities across infrastructure and applications within a cloud-based FedRAMP Moderate-compliant environment supporting US federal government requirements.
Compensation
The pay range for this opportunity is from $127,100 to $133,400 + benefits. This range represents the anticipated low and high end of the salary plus bonus for this position. Actual total compensation will vary and are based on factors such as a candidate’s qualifications, skills, competencies.
Responsibilities
Lead and coordinate vulnerability remediation activities across infrastructure and applications
Evaluate vulnerabilities using CVE and CVSS data, exploitability, threat intelligence, asset criticality, attack paths, exposure information, and other relevant risk indicators to help determine remediation priorities
Support vulnerability remediation activities aligned with applicable CISA BOD 26-04 requirements and other relevant federal cybersecurity directives
Support vulnerability assessment and remediation across Windows Server 2019 and above, Linux/RHEL 9.x and above, and application environments
Use tools such as Tenable Security Center, Nessus, and Qualys to review vulnerability findings, validate remediation status, identify outstanding exposures, and support ongoing vulnerability management operations
Requirements
Bachelor degree or equivalent experience
Master degree or equivalent experience
Nice to have: FedRAMP
Nice to have: NIST SP 800-53
Nice to have: DISA Security Technical Implementation Guides (STIGs)
Vulnerability Management Engineer responsible for enterprise vulnerability assessment, validation, prioritization, remediation coordination and evidence management for NATO SOFCOM missions.
Compensation
The likely salary range for this position is $107,744 - $138,000.
Responsibilities
Administer Tenable Security Center/Tenable.sc, Nessus Managers, Nessus scanners and agents
Plan and perform authorized vulnerability scans, verify findings, analyze false positives
Prioritize vulnerabilities using CVSS, EPSS, CISA KEV, exploit context and documented mission impact
Coordinate remediation plans with systems, endpoint, network and application teams
Maintain POA&Ms, aging reports, technical remediation registers, service dashboards and accreditation evidence
Senior Endpoint Security Engineer responsible for managing and administering Tenable Suite environments on Linux platforms, conducting vulnerability scans, and collaborating with IT and security teams to remediate identified vulnerabilities.
Locations (2)
Springfield, Virginia, United States
St. Louis, Missouri, United States
Compensation
The proposed salary range for this position is: $75,200-$158,100
Responsibilities
Install, configure, and maintain the Tenable Security Center, Tenable Nessus Scanners, and Tenable Nessus Managers on Linux platforms.
Perform regular vulnerability scans and assessments across the organization's network using Tenable products.
Analyze scan results and prioritize vulnerabilities based on severity and impact.
Collaborate with IT and security teams to remediate identified vulnerabilities.
Generate and distribute vulnerability reports to stakeholders.
Senior Endpoint Security Engineer responsible for managing and administering Tenable Suite environments on Linux platforms, conducting vulnerability scans, and collaborating with IT and security teams to remediate identified vulnerabilities.
Locations (2)
Springfield, Virginia, United States
St. Louis, Missouri, United States
Compensation
The proposed salary range for this position is: $75,200-$158,100
Responsibilities
Manage and administer Tenable Suite environment on Linux
Configure and maintain Tenable Security Center, Nessus Scanners, and Nessus Managers
Perform regular vulnerability scans and assessments
Analyze scan results and prioritize vulnerabilities
Collaborate with IT and security teams to remediate vulnerabilities
Requirements
Bachelor's degree (Engineering, Computer Science or related field)
Nice to have: CSSP Infrastructure Support certification
Senior Information System Security Engineer (ISSE) providing technical security assessments, design, implementation, and guidance for government intelligence customers.
Compensation
The projected compensation range for this position is $114,600.00-$190,200.00.
Responsibilities
Perform or review technical security assessments of computing environments
Apply IA policy to design, develop, and implement secure networking, computing, and enclave environments
Contribute to security planning, assessment, risk analysis, risk management, certification and awareness activities
Review certification and accreditation documentation
Support security authorization activities in compliance with ICD 503 and NIST RMF
Requirements
Bachelor’s Degree
Nice to have: Information Assurance Management (IAM) Level I certifications (CAP, GSLC, CISM, CASP, CISSP, CCISCO, Security+)
Nice to have: Experience supporting government enforcement of trusted relationships
Nice to have: Experience with Trellix ePolicy Orchestrator
Nice to have: Experience with Tenable Security Center
Responsible for end-to-end management, security and operational lifecycle of enterprise IT infrastructure, endpoint technologies and security applications.
Responsibilities
Take ownership of the end-to-end lifecycle management of infrastructure, endpoint technologies and security applications
Design, implement, configure and maintain enterprise endpoint management solutions
Manage and maintain Windows desktop and server environments
Manage Active Directory, Group Policy and security baseline configurations
Lead and support software deployment, application packaging, patch management and continuous release activities
Lead the design, development, improvement, integration, deployment, and ongoing maintenance of the enterprise Vulnerability Management solution for a federal cybersecurity engineering program.
Compensation
Salary: $165K - $205K
Responsibilities
Lead the architecture and design of the enterprise vulnerability management solution
Assess the current Tenable deployment and drive its capability improvement and maturity plan
Deliver complete scanning visibility across IT, cloud, and OT endpoints
Design the configuration compliance baseline program and its automation
Integrate vulnerability and compliance data with enterprise risk, asset, data, and SIEM platforms
Requirements
Bachelor’s degree in Computer Science, Information Technology, Business, Management, or a related discipline
Nice to have: Experience supporting federal government contracts as a contractor
Nice to have: Experience with federal Continuous Diagnostics and Mitigation (CDM) programs
Nice to have: Experience designing Tenable OT Security deployments for industrial control system (ICS) environments
Nice to have: Experience integrating Tenable with ServiceNow GRC/IRM and SIEM platforms
Lead the development, improvement, integration, deployment, and ongoing maintenance of the enterprise Vulnerability Management solution for a federal cybersecurity engineering program.
Compensation
Salary: $150K - $185K
Responsibilities
Lead development, deployment, and maintenance of the vulnerability management solution
Deliver accurate, on-schedule vulnerability and compliance scanning and reporting
Execute the Tenable capability improvement and maturity plan
Keep the platform patched, highly available, and reliably integrated with enterprise systems
Provide routine and ad-hoc vulnerability reporting to stakeholders
Requirements
Bachelor's degree in Computer Science, Information Technology, Business, Management or related discipline
Nice to have: Supporting federal government contracts as a contractor
Nice to have: Experience with federal Continuous Diagnostics and Mitigation (CDM) programs
Nice to have: Experience scanning OT and industrial control system (ICS) environments
Nice to have: Experience with DISA STIG and CIS benchmark compliance scanning