Security Engineer, Vulnerability Management (ACAS/Tenable.sc) - Secret clearance

About the Role

PGTEK is seeking a Security Engineer, Vulnerability Management with a Secret clearance (or higher) to administer and optimize our Tenable.sc/ACAS environment, drive vulnerability remediation across enterprise systems, and support compliance with DoD STIG and RMF requirements. This is a hands-on role that combines deep Tenable platform expertise with Windows/Linux administration, vulnerability analysis, system hardening, and cross-team collaboration. The ideal candidate will have experience working in a DoD or federal environment and be comfortable managing vulnerability scanning and remediation across complex enterprise environments.

Responsibilities

• Tenable Security Center / ACAS
  • Administer and optimize Tenable.sc and Nessus, including scan policies, scan zones, repositories, credentials, and audit files
  • Perform credentialed vulnerability scans, STIG compliance scans, discovery scans, and port scans
  • Analyze and interpret STIGs, CKLs, ACAS/Tenable findings, and vulnerability results to support compliance and risk reduction
  • Leverage Windows and Linux administration skills to support and troubleshoot authenticated vulnerability scanning
  • Conduct false-positive analysis and validation to ensure accurate vulnerability reporting
  • Collaborate with Cloud, Network, Platform, Security, and Engineering teams to drive vulnerability remediation and system hardening
• Vulnerability Coverage & Asset Discovery
  • Identify and close gaps in vulnerability scan coverage to ensure comprehensive visibility across the environment
  • Perform asset discovery and maintain accurate inventories to ensure all in-scope systems are included in scanning cycles
  • Analyze scan results to identify coverage gaps, unscanned assets, and compliance blind spots
  • Recommend corrective actions to improve vulnerability visibility, scanning effectiveness, and overall security posture

Requirements

• 5+ years of experience in vulnerability management, information assurance, or systems security, preferably within a DoD or federal environment
• Hands-on experience administering Tenable.sc, Nessus, and ACAS in a DoD or federal environment
• Working knowledge of DoD STIGs, CKLs, and RMF processes
• Strong Windows and Linux administration experience
• Active DoD Secret clearance required; clearance must be current and verifiable
• DoD 8570/8140 IAT Level II baseline certification required, such as:
  • CompTIA Security+ CE
  • CySA+
  • GSEC
  • SSCP
  • CCNA-Security
• Strong written and verbal communication skills with the ability to collaborate effectively across technical teams

Work Location & Travel

This is a hybrid position. Candidates must live within approximately 90 minutes of one of the following locations:

• Mechanicsburg, PA
• Ogden, UT
• Oklahoma City, OK
• Montgomery, AL
• Fort Meade, MD

Approximately 25% travel may be required to DISA locations.

Pay

Salary Range: $130,000-$160,000

Benefits

• Comprehensive PPO medical coverage with access to a Health Savings Account (HSA) option
• Vision plan and dental insurance (base dental plan option paid for by PGTEK)
• Life Insurance, Short and Long-Term Disability, and Critical Illness insurance (premiums covered)
• Matching 401(k) plan
• Discount on pet insurance through ASPCA Pet Insurance
• Employee Assistance Program (available at no cost)
• Generous PTO and Holidays
• Education Assistance Program (available after 12 months of employment)

About PGTEK

PGTEK is a true consulting organization dedicated to helping clients achieve their business and technology objectives utilizing our decades of experience and business relationships. PGTEK invests in the educational advancements of our staff by providing the necessary resources to complete Professional and Business Certifications. Our company is our people, and we treat them like family.