DoD Vulnerability Management Engineer (Tenable/ACAS)

PGTEK; Oklahoma City (OK); Hybrid; USD 130,000 - 160,000; Full time

Benefits offered by this job

Health Insurance

Vision Plan

Dental Insurance

Life Insurance

Disability Insurance

401(k) Matching

Pet Insurance Discount

Employee Assistance Program

PTO & Holidays

Education Assistance

Job summary

PGTEK is seeking a Security Engineer, Vulnerability Management with a Secret clearance or higher to administer Tenable.sc/ACAS, drive remediation, and help meet DoD STIG/RMF requirements. This hands-on role blends platform expertise with Windows/Linux administration and cross-team collaboration in a DoD/federal environment.

The candidate will manage scans, validate findings, and support risk mitigation across enterprise systems, with hybrid work options and ~25% travel to DISA locations.

Qualifications

• 5+ years of experience in vulnerability management or information assurance in a DoD/federal setting.
• Active DoD Secret clearance or higher, current and verifiable.
• Hands-on Tenable.sc/Nessus/ACAS administration in DoD/federal envs.
• Strong Windows and Linux administration skills.

Responsibilities

• Administer and optimize Tenable.sc/Nessus; manage scan policies, zones, credentials.
• Perform credentialed vulnerability scans, STIG compliance, discovery and port scans.
• Analyze STIGs, CKLs, ACAS/Tenable findings to support compliance and risk reduction.
• Lead remediation efforts with cross-team collaboration to harden systems.
• Conduct false-positive analysis to ensure accurate reporting.

Skills

Vulnerability mgmt

DoD environment

Windows/Linux admin

Cross-team collaboration

Tools

Tenable.sc

ACAS

Nessus

Job description

PGTEK is seeking a Security Engineer, Vulnerability Management with a Secret clearance or higher to administer Tenable.sc/ACAS, drive remediation, and help meet DoD STIG/RMF requirements. This hands-on role blends platform expertise with Windows/Linux administration and cross-team collaboration in a DoD/federal environment.

The candidate will manage scans, validate findings, and support risk mitigation across enterprise systems, with hybrid work options and ~25% travel to DISA locations.