Senior Vulnerability Management Engineer – Active Secret Clearance

🔥 12 hours ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

PGTEK

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2002

🏢 Enterprise

🔒 Cybersecurity

Enterprise • Cloud • Cybersecurity

PGTEK is a technology solutions provider specializing in enterprise solutions, cloud computing, and high-performance computing. The company offers a range of services including infrastructure management, DevOps automation, and project management, primarily supporting federal and defense sectors. With a strong commitment to employing veterans, PGTEK is recognized for its dedication to delivering quality outcomes in national security and commercial services, backed by decades of experience in various technological domains.

📋 Description

• Administer and optimize the full Tenable platform, including: • - Tenable.sc • - Tenable Vulnerability Management (formerly Tenable.io) • - Nessus • - Nessus Agents • Perform authenticated and unauthenticated vulnerability scans across Windows, Linux, network, and cloud environments. • Analyze vulnerability data, validate findings, eliminate false positives, and prioritize remediation efforts based on risk. • Coordinate remediation activities with infrastructure, networking, and application teams through closure. • Manage scan schedules, repositories, credentials, scan zones, and agent deployments. • Troubleshoot scanning issues, credential failures, performance bottlenecks, and platform health. • Develop executive dashboards, compliance reports, and security metrics. • Support RMF continuous monitoring, POA&M management, and audit activities. • Integrate Tenable with ServiceNow, SIEM, asset management, and automation platforms. • Develop automation using PowerShell, Python, Bash, and Tenable APIs. • Recommend system hardening improvements and security best practices. • Provide technical mentorship to junior engineers and vulnerability analysts. • Support security investigations and incident response activities requiring vulnerability analysis.

🎯 Requirements

• 7+ years of cybersecurity engineering, vulnerability management, or systems engineering experience. • Experience supporting Federal Government or DoD environments (5+ years preferred). • Active Secret Clearance (TS/SCI preferred). • Deep experience administering: • - Tenable.sc • - Tenable Vulnerability Management • - Nessus • - Nessus Agents • Strong understanding of vulnerability management lifecycle and remediation processes. • Experience with: • - CVSS scoring • - Known Exploited Vulnerabilities (KEV) • - Patch management • - STIG compliance scanning • - False-positive validation • Working knowledge of: • - Windows Server • - Linux (RHEL, CentOS, Ubuntu) • - VMware vSphere • - AWS and/or Azure • - Enterprise networking (TCP/IP, DNS, VLANs, routing, switching) • Compliance ExperienceExperience supporting one or more of the following: • - NIST SP 800-53 • - Risk Management Framework (RMF) • - DISA STIGs and SRGs • - CMMC • - CIS Benchmarks • - DoD 8570 / 8140 requirements • Preferred Skills • - PowerShell, Python, or Bash scripting • - Tenable API development and automation • - ServiceNow or Jira integration • - SIEM and SOAR platforms • - Executive reporting and security metrics • - Experience improving vulnerability remediation processes and reducing MTTR