Vulnerability Management Engineer

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Foresite Cybersecurity

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2013

💼 Consulting

🔒 Cybersecurity

☁️ SaaS

💰 Venture Round - Foresite on 2019-01

Consulting • Cybersecurity • SaaS

Foresite Cybersecurity is a managed security services and SecOps company founded in 2013 that helps organizations of all sizes defend against modern cyber threats. It combines human cybersecurity expertise, a proprietary security and compliance management platform (ProVision), and partnerships with cloud providers (notably Google Cloud) and AI technologies to deliver monitoring, incident response, compliance, and security automation as a service. Foresite positions itself as a B2B partner and extension of clients' security teams, serving thousands of customers with managed detection and response, SOC services, and security engineering.

📋 Description

• Administer, engineer, and operate Tenable product infrastructure • Build, optimize, and maintain multi-tenant shared instances and standalone client consoles across Tenable Vulnerability Management, Tenable Security Center, Tenable OT Security, and other Tenable modules • Monitor distributed scanning infrastructure, including on-premise Nessus scanners, cloud scanner pools, and Tenable Nessus Agents • Identify offline scanners, stale agent check-ins, plugin update failures, and linked-scanner issues, and coordinate resolutions with client teams • Configure and maintain RBAC definitions, custom asset groups, and scanning permissions • Maintain Tenable API data-ingestion pipelines into analytical hubs, Google SecOps (Chronicle), and ServiceNow • Design, schedule, and execute credentialed and uncredentialed vulnerability scans across hybrid infrastructures • Operate on-premise Tenable Security Center deployments, including repository configuration, scan-zone design, and analytic queries • Execute specialized Tenable OT Security scans for industrial control systems where applicable • Build custom dashboards, asset filters, and saved scan templates • Use Tenable VPR and CES to prioritize exploitable threats • Convert vulnerability data into prioritized technical remediation checklists and conduct recurring technical reviews with client infrastructure teams

🎯 Requirements

• 4+ years in cybersecurity operations, system administration, or vulnerability management • At least 2 years of dedicated, hands-on Tenable administration at scale across 10,000+ assets • Advanced troubleshooting of credentialed scanning failures over SMB and SSH • Ability to manage multiple client tenants without cross-contaminating client data, credentials, or findings • Must hold at least one active mandatory technical certification: Tenable One Vulnerability Management Specialist, Tenable Security Center Specialist, or Tenable One OT Exposure Specialist • Knowledge of Tenable distributed scanning components • Hands-on experience running advanced credentialed scans • Multiple Tenable Specialist certifications are a plus • Google SecOps / Chronicle Certified Professional, CompTIA Security+ / Network+ / Linux+, or CEH are advantageous • Exposure to Tenable Web App Scanning, Identity Exposure, Cloud Security, Attack Surface Management, Patch Management, Tenable One platform capabilities, AI Exposure, Enclave Security, PCI ASV, or Nessus Expert is helpful • Understanding of Tenable licensing across modules, including asset counts, resource ratios, and add-on components in an MSSP environment

🏖️ Benefits

• Robust medical insurance options • Employer-paid Dental coverage • Employer-paid Short-Term Disability (STD) • Employer-paid Long-Term Disability (LTD) • 3 weeks of paid vacation • Additional sick leave • Paid company holidays • World-class training and mentorship • Career development support toward technical specialization or leadership • Work with the latest AI-enhanced security tools and GCP native technologies