Vulnerability Management Engineer (Tenable / Nessus)

Job Description

Job Description

Vulnerability Management Engineer (Tenable / Nessus)

Cyber Security Engineer III - Endpoint Security Services

Location: St. Louis, MO - on site

Time Type: Full time, Exempt

Clearance Required to Start: Active TS/SCI (U.S. citizenship required)

Additional Requirement: Must be able to obtain and maintain a Government polygraph (post-hire requirement)

Travel: Up to 10%, local

Salary Range: $101,000 – $111,000

Own the vulnerability picture for an entire enterprise.

RISA is hiring a Senior Endpoint Security Engineer to run the Tenable environment for an Intelligence Community customer's enterprise. You will build and sustain Security Center, the Nessus scanners, and the managers behind them, then turn scan results into prioritized remediation the rest of the team can act on. You will talk to the owner here, not a recruiting queue.

What You Will Do

• Install, configure, and maintain Tenable Security Center, Nessus Scanners, and Nessus Managers on Linux.
• Run regular vulnerability scans and assessments across the enterprise network.
• Analyze scan results and prioritize vulnerabilities by severity and impact.
• Work with IT and security teams to remediate what you find.
• Generate and distribute vulnerability reports to stakeholders.
• Monitor security alerts and respond to incidents promptly; stay current on emerging threats.
• Train and support users on the Tenable suite, and keep the environment performing and secure.
• Configure and install other security products on Linux as needed.

What You'll Bring

• S. citizenship and an active TS/SCI.
• Ability to successfully obtain and maintain a Government polygraph after hire.
• Bachelor's degree in Engineering, Computer Science, or a related field plus 10 years of technical experience in cyber security; additional experience may be considered in lieu of a degree.
• Current DoD 8140.01 / 8570.01-M IAT Level II certification, and CSSP Infrastructure Support within 6 months of hire.
• Hands-on administration of the Tenable suite - Security Center, Nessus Scanners, and Nessus Manager.
• Strong working knowledge of Linux, including installation, configuration, and maintenance.
• Experience on large-scale enterprise or global networks in a high-paced, diverse environment.
• DoD Architecture Framework and related DoD network architecture and strategic planning instructions.
• Experience planning, designing, and evaluating security systems and architectures, and reporting to senior management and customers.

Nice to Have

• CSSP Infrastructure Support certification already in hand.
• Linux certifications.
• Python or PowerShell scripting.

About RISA

Rolston Information Systems Assurance (RISA) is a Service-Disabled Veteran-Owned Small Business that has supported federal defense and intelligence cybersecurity missions for more than seventeen years. We are small on purpose: direct access to leadership, a real say in how the work gets done, and none of the layers that slow large primes down.

Benefits

Medical, dental, and vision insurance; 401(k) and Roth; Paid Time Off; and 11 paid Federal Holidays.

RISA is an Equal Opportunity Employer.

• Upon receiving an offer of employment, all applicants will be required to do a background check, including a criminal record check and employment/education verification.