Vulnerability Scanning Administrator (Cybersecurity Technical Staff 2)

About the Role

The Innovative Customer Experience (ICE) Division at Los Alamos National Laboratory (LANL) is seeking a skilled Vulnerability Scanning Specialist to manage and optimize scanning across a large, diverse network. In this role, you will troubleshoot network and agent-based scanning issues, implement enhancements to improve scanning and analysis capabilities, and collaborate with team members to maintain a scalable and secure infrastructure. You will also provide technical guidance to the team, CSIRT, and NSOC.

ICE Division consists of over 350 talented professionals, including Cybersecurity Technical Staff, Solution Architects, and Computer Systems Professionals, who support mission-driven IT needs across unclassified and classified networks. The role involves optimizing IT use, ensuring seamless service delivery, and supporting a Tenable-based application that tracks, documents, scans, and blocks non-compliant hosts on the network.

Responsibilities

• Diagnose and resolve issues with network vulnerability scanning tools, with a primary focus on Tenable applications.
• Partner with network operators and engineers to identify and resolve host discovery tool challenges.
• Collaborate with development teams to conduct release testing, debug issues, and enhance the Tenable-based application.
• Integrate the Tenable-based system with external services and data sources through cross-functional team collaboration.
• Support vulnerability analysts in investigating false positives and conducting risk assessments.
• Facilitate network audits for security compliance teams.
• Provide incident response support for host quarantine solutions and scanning-related inquiries.
• Deliver technical assistance and guidance to system owners and administrators.
• Develop and maintain comprehensive application documentation for end users and technical staff.
• Research, evaluate, and recommend new vulnerability scanning and host discovery solutions.
• Design and maintain monitoring systems for automated data ingestion and processing workflows.
• Perform enterprise-wide vulnerability scans using tools like Nessus and Tenable Security Center, ensuring full coverage across multiple platforms and architectures.
• Deliver Tier 3 support for complex scanning issues.

Requirements

• Experience maintaining, optimizing, and troubleshooting industry vulnerability scanning/management tools.
• Experience with enterprise-level vulnerability management, including configuring scanning, reviewing scan results, troubleshooting false positives/negatives, and proposing remediation strategies.
• Excellent problem-solving skills and the ability to work in a fast-paced environment.
• Strong communication skills and the ability to collaborate effectively with team members.
• Strong documentation skills.

Qualifications

Position requires a Bachelor's degree in a technical field and a minimum of 5 years' related experience, or an equivalent combination of education and experience. At this level, postgraduate work may be expected.

Desired Skills

• Experience administering Tenable Security Center for enterprise-wide vulnerability scanning and assessments.
• Proficiency in configuring scan policies, managing scan zones, generating compliance reports, and integrating vulnerability data.
• Experience performing credentialed vulnerability scanning with Nessus Agents.
• Strong understanding of fundamental networking concepts.
• Experience administering Windows and *NIX in an enterprise environment.

Work Location

This position is onsite in Los Alamos, NM. All work locations are at the discretion of management.

Schedule

This position may require 24/7 coverage, which could involve working a shift or weekend schedule. Employees may be eligible for shift differential pay when assigned by their manager. Shift and weekend assignments are at the discretion of the manager.

Benefits

• PPO or High Deductible medical insurance with a large nationwide network.
• Dental and vision insurance.
• Free basic life and disability insurance.
• Paid maternity and parental leave.
• Award-winning 401(k) (6% matching plus 3.5% annually).
• Learning opportunities and tuition assistance.
• Flexible schedules and time off (paid sick, vacation, and holidays).
• Onsite gyms and wellness programs.
• Extensive relocation packages (outside a 50-mile radius).

Security Clearance

This position requires a Q clearance, which requires U.S. citizenship except in extremely rare circumstances. Selected applicants will be subject to a background investigation conducted by or on behalf of the Federal Government. Dependent upon the position, additional authorization to access classified information may be required, which may or may not be available to dual citizens. Receipt of a Q clearance and additional access authorization ultimately is a decision of the Federal Government.

Note: Due to federal restrictions, citizens of the People's Republic of China (including Hong Kong and Macau), the Islamic Republic of Iran, the Democratic People's Republic of Korea (North Korea), and the Russian Federation who are not Lawful Permanent Residents ("green card" holders) are prohibited from accessing facilities that support national security laboratories and nuclear weapons production facilities, including Los Alamos National Laboratory.