DoD Vulnerability Management Engineer - Tenable / ACAS Expert

PGTEK; Mechanicsburg (Cumberland County); Hybrid; USD 130,000 - 160,000; Full time

Benefits offered by this job

PPO medical with HSA

Vision plan

Dental insurance

Life Insurance

Short/Long-Term Disability

401(k) matching

Pet insurance discount

PTO & Holidays

Education Assistance after 12 months

Job summary

PGTEK is seeking a Security Engineer, Vulnerability Management to administer Tenable.sc/ACAS, drive remediation across enterprise systems, and ensure DoD STIG/RMF compliance. The role requires DoD Secret clearance and hands-on Windows/Linux administration in a federal environment.

The candidate will perform credentialed scans, analyze findings, and collaborate with cross-functional teams to strengthen security posture while supporting mission-critical federal programs.

Qualifications

• 5+ years in vulnerability management or information security in a DoD/federal environment.
• Hands-on Tenable.sc, Nessus and ACAS administration experience.
• Knowledge of DoD STIGs, CKLs and RMF processes.
• Strong Windows and Linux administration skills.
• Active DoD Secret clearance that is current and verifiable.
• IAT Level II baseline certifications such as Security+ CE, CySA+, GSEC, SSCP, CCNA-Security.

Responsibilities

• Administer and optimize Tenable.sc/ACAS, including policies, zones, repositories and credentials.
• Perform credentialed vulnerability scans and STIG compliance scans.
• Analyze STIGs, CKLs and ACAS findings to support compliance and risk reduction.
• Support authenticated vulnerability scanning with Windows/Linux administration.
• Conduct false-positive analysis to ensure accurate reporting.
• Collaborate with Cloud, Network, Platform, Security and Engineering teams to drive remediation and hardening.

Skills

Vulnerability mgmt

Tenable.sc / ACAS

Windows admin

Linux admin

DoD environment

RMF / STIG

DoD Secret clearance

Credentialed scans

Cross-team collab

Education

Security+ CE

CySA+

GSEC

SSCP

CCNA-Security

Tools

Tenable.sc

Nessus

Job description

PGTEK is seeking a Security Engineer, Vulnerability Management to administer Tenable.sc/ACAS, drive remediation across enterprise systems, and ensure DoD STIG/RMF compliance. The role requires DoD Secret clearance and hands-on Windows/Linux administration in a federal environment.

The candidate will perform credentialed scans, analyze findings, and collaborate with cross-functional teams to strengthen security posture while supporting mission-critical federal programs.