DoD Vulnerability Management Engineer | Secret Cleared

PGTEK; Ogden (UT); Hybrid; USD 130,000 - 160,000; Full time

Benefits offered by this job

Health insurance options

401(k) with matching

Education Assistance after 12 months

Paid time off and holidays

Pet insurance discount

Job summary

PGTEK is seeking a Security Engineer, Vulnerability Management to administer Tenable.sc/ACAS, drive remediation across enterprise systems, and support DoD STIG and RMF compliance. This hands-on role requires Windows/Linux administration, vulnerability analysis, and collaboration with cross‑functional teams in a federal environment.

Active DoD Secret clearance is required; prior federal experience is preferred. The position is hybrid with travel to DISA locations as needed.

Qualifications

• 5+ years of experience in vulnerability management, information assurance, or systems security, preferably within a DoD or federal environment.
• Hands-on experience administering Tenable.sc, Nessus, and ACAS in a DoD or federal environment.
• Working knowledge of DoD STIGs, CKLs, and RMF processes.
• Strong Windows and Linux administration experience.
• Active DoD Secret clearance required; clearance must be current and verifiable.
• DoD 8570/8140 IAT Level II baseline certification required, such as: CompTIA Security+ CE, CySA+, GSEC, SSCP, CCNA-Security.
• Strong written and verbal communication skills with the ability to collaborate effectively across technical teams.

Responsibilities

• Administer and optimize Tenable.sc and Nessus, including scan policies, scan zones, repositories, credentials, and audit files
• Perform credentialed vulnerability scans, STIG compliance scans, discovery scans, and port scans
• Analyze and interpret STIGs, CKLs, ACAS/Tenable findings, and vulnerability results to support compliance and risk reduction
• Leverage Windows and Linux administration skills to support and troubleshoot authenticated vulnerability scanning
• Conduct false-positive analysis and validation to ensure accurate vulnerability reporting
• Collaborate with Cloud, Network, Platform, Security, and Engineering teams to drive vulnerability remediation and system hardening
• Identify gaps in vulnerability scan coverage and maintain accurate inventories

Skills

Vulnerability management

DoD/Federal experience

Windows administration

Linux administration

Vulnerability analysis

Cross-functional collaboration

Communication

Tools

Tenable.sc

ACAS

Nessus

Windows OS

Linux OS

STIG/RMF knowledge

Job description

PGTEK is seeking a Security Engineer, Vulnerability Management to administer Tenable.sc/ACAS, drive remediation across enterprise systems, and support DoD STIG and RMF compliance. This hands-on role requires Windows/Linux administration, vulnerability analysis, and collaboration with cross‑functional teams in a federal environment.

Active DoD Secret clearance is required; prior federal experience is preferred. The position is hybrid with travel to DISA locations as needed.