Vulnerability Management Engineer (Tenable)

Seeking a cybersecurity professional with strong experience leading vulnerability management activities across enterprise and cloud environments. This role will focus heavily on administering and optimizing Tenable-based vulnerability scanning programs, analyzing scan results, developing executive dashboards and reporting, and partnering with technical teams to drive remediation efforts. Experience supporting federal agencies is highly preferred.

Key Responsibilities

• Administer and optimize Tenable vulnerability management solutions.
• Design, schedule, execute, and maintain enterprise vulnerability scans.
• Analyze scan results and prioritize vulnerabilities based on risk and business impact.
• Develop and maintain Splunk dashboards and reporting to provide visibility into vulnerability trends, remediation progress, and overall security posture.
• Support Microsoft Defender administration and monitoring efforts, including endpoint protection, threat detection, and remediation activities.
• Develop dashboards, metrics, and executive reporting within Tenable.
• Partner with infrastructure, cloud, and application teams to track vulnerability remediation activities.
• Support vulnerability management efforts across Azure and AWS cloud environments.
• Assist with Data Loss Prevention (DLP) and endpoint security initiatives.
• Validate remediation activities and maintain vulnerability tracking processes.
• Support compliance requirements within federal cybersecurity environments.
• Provide risk reporting and technical recommendations to security leadership and stakeholders.
• Support vulnerability remediation resulting from security assessments and penetration testing activities.
• Contribute to cybersecurity operations initiatives involving endpoint protection and enterprise security tooling.

Required Education + Experience

• Bachelor's degree with 10+ years of professional experience.
• Certification - must have one of the following CISSP, GCED, GCIH, CND, SSCP
• 4+ years of cybersecurity experience with at least 2 years in a federal environment.
• Hands-on experience with Tenable vulnerability management solutions.
• Hands-on experience with Splunk, including developing dashboards, reports, and visualizations to support vulnerability management and security operations.
• Hands-on experience with Microsoft Defender, including endpoint protection, threat detection, security monitoring, and remediation activities.
• Strong understanding of vulnerability assessment methodologies and remediation processes.
• Hands-on experience identifying, analyzing, and tracking vulnerabilities across Azure and/or AWS environments.
• Proven ability to consistently understand threats, evaluate the impact of potential incidents, and recommend risk reduction techniques based on a knowledge of different operation threat environments, general attack stages, incident categories, cyber defense tool data collection, and playbooks for resolving common incidents.
• Knowledge of and experience overseeing the administration and configuration of workstation and infrastructure security tools including but not limited to: Anti-malware/Anti-virus software, Data Loss Prevention (DLP) software, endpoint detection and response (EDR), vulnerability assessment tools, asset discovery and management software, SIEM, Cloud Access Security Broker (CASB).

Preferred Experience

• Experience with Nessus and related vulnerability assessment tools to identify, analyze, and prioritize security vulnerabilities.
• Experience with BigFix to support remediation activities, endpoint management, and vulnerability mitigation efforts.
• Knowledge of OT/ICS/SCADA environments.
• Experience supporting enterprise penetration test remediation programs.
• Knowledge of NIST, RMF, FISMA, or FedRAMP requirements.

#DICE