Vulnerability Management Engineer (Tenable)
Alluvial Concepts · Rockville, MD · 1 mo ago
Information TechnologyFull-time
Seeking a cybersecurity professional with strong experience leading vulnerability management activities across enterprise and cloud environments. This role will focus heavily on administering and optimizing Tenable-based vulnerability scanning programs, analyzing scan results, developing executive dashboards and reporting, and partnering with technical teams to drive remediation efforts. Experience supporting federal agencies is highly preferred. Key Responsibilities Administer and optimize Tenable vulnerability management solutions.Design, schedule, execute, and maintain enterprise vulnerability scans.Analyze scan results and prioritize vulnerabilities based on risk and business impact.Develop dashboards, metrics, and executive reporting within Tenable.Partner with infrastructure, cloud, and application teams to track vulnerability remediation activities.Support vulnerability management efforts across Azure and AWS cloud environments.Assist with Data Loss Prevention (DLP) and endpoint security initiatives.Validate remediation activities and maintain vulnerability tracking processes.Support compliance requirements within federal cybersecurity environments.Provide risk reporting and technical recommendations to security leadership and stakeholders.Support vulnerability remediation resulting from security assessments and penetration testing activities.Contribute to cybersecurity operations initiatives involving endpoint protection and enterprise security tooling. Required Education + Experience Bachelor’s degree with 10+ years of professional experience.Certification - must have one of the following CISSP, GCED, GCIH, CND, SSCP4+ years of cybersecurity experience with at least 2 years in a federal environment.Hands-on experience with Tenable vulnerability management solutions.Strong understanding of vulnerability assessment methodologies and remediation processes.Experience creating dashboards, reporting, and risk visualizations within Tenable to communicate vulnerability trends, remediation progress, and overall risk posture.Hands-on experience identifying, analyzing, and tracking vulnerabilities across Azure and/or AWS environments.Proven ability to consistently understand threats, evaluate the impact of potential incidents, and recommend risk reduction techniques based on a knowledge of different operation threat environments, general attack stages, incident categories, cyber defense tool data collection, and playbooks for resolving common incidents.Knowledge of and experience overseeing the administration and configuration of workstation and infrastructure security tools including but not limited to: Anti-malware/Anti-virus software, Data Loss Prevention (DLP) software, endpoint detection and response (EDR), vulnerability assessment tools, asset discovery and management software, SIEM, Cloud Access Security Broker (CASB). Preferred Experience Experience with Nessus and related vulnerability assessment tools to identify, analyze, and prioritize security vulnerabilities.Experience with BigFix to support remediation activities, endpoint management, and vulnerability mitigation efforts.Knowledge of OT/ICS/SCADA environments.Exposure to Splunk or other SIEM platforms.Experience supporting enterprise penetration test remediation programs.Knowledge of NIST, RMF, FISMA, or FedRAMP requirements. #DICE