Endpoint Security Engineer III

RISA; Springfield (VA); On-site; USD 117,000 - 128,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) and Roth

Paid Time Off

11 paid Federal Holidays

Job summary

RISA in Springfield, VA is seeking a senior Endpoint Security Engineer to own the Tenable stack on Linux across a large, global network supporting an Intelligence Community customer. This hands-on role requires TS/SCI clearance and deep expertise with Security Center, Nessus, and Linux.

You will install, configure, and tune the Tenable suite, run vulnerability assessments, prioritize findings by impact, and collaborate with IT and security teams to remediate.

Qualifications

• Active TS/SCI clearance and ability to pass a government polygraph after hire.
• DoD 8570/8140 IAT Level II certification required (e.g., Security+ CE or higher).
• Bachelor’s degree in Engineering, Computer Science, or related field with ten years of cybersecurity experience.
• Hands-on with Tenable Suite: Security Center, Nessus Scanners, and Nessus Manager.
• Strong Linux installation, configuration, maintenance, and hardening skills.

Responsibilities

• Install, configure, and maintain Tenable Security Center, Nessus Scanners, and Nessus Managers on Linux.
• Run regular vulnerability scans and assessments across the enterprise network.
• Analyze scan results, prioritize vulnerabilities by severity and impact.
• Remediate findings with IT and security teams.
• Produce vulnerability reports for stakeholders and senior management.
• Monitor security alerts and respond to incidents promptly.
• Train users on Tenable products and keep the environment secure.

Skills

TS/SCI clearance

Tenable Suite

Linux administration

Scripting (Python Bash PowerShell)

Vulnerability management

DoD 8570/8140 IAT II

Education

Bachelor's degree in Engineering, Computer Science, or related field

Tools

Tenable Security Center

Nessus Scanners

Nessus Manager

Linux

Job description

Endpoint Security Engineer III

Cyber Security Engineer III | Vulnerability Management (Tenable / Nessus, Linux)

Location: Springfield, VA (100% onsite)

Time Type: Full Time

Clearance Required to Start: Active TS/SCI (U.S. citizenship required)

Additional Requirement: Government polygraph, post-hire

Travel: Up to 10%, local

Salary Range: $117,000 - $128,000 per year

Own the Tenable stack for an Intelligence Community enterprise, from the Linux box up.

RISA is hiring a senior Endpoint Security Engineer to install, run, and tune the Tenable Suite (Security Center, Nessus Scanners, and Nessus Managers) on Linux across a large, global network supporting an Intelligence Community customer. This is a hands-on administrator role on a long-term program, working alongside a talented engineering team. You will talk to the owner here, not a recruiting queue.

What You Will Do

• Install, configure, and maintain Tenable Security Center, Nessus Scanners, and Nessus Managers on Linux platforms.
• Run regular vulnerability scans and assessments across the enterprise network.
• Analyze scan results and prioritize vulnerabilities by severity and impact.
• Work with IT and security teams to remediate findings.
• Produce and distribute vulnerability reports to stakeholders and senior management.
• Monitor security alerts and respond to incidents promptly.
• Train and support users on the Tenable products.
• Keep the Tenable environment performing well and secure, and install and configure other security products on Linux.
• Stay current on emerging threats and vulnerabilities.

What You'll Bring

• Active TS/SCI clearance, and the ability to pass and maintain a Government polygraph after hire.
• Current DoD 8570/8140 IAT Level II certification (e.g., Security+ CE or higher).
• Ability to obtain a CSSP Infrastructure Support certification within six months of hire.
• Education and experience: Bachelor's degree in Engineering, Computer Science, or a related field plus ten years of technical cybersecurity experience. Additional experience may be considered in lieu of a degree.
• Hands-on administrator experience with the Tenable Suite: Security Center, Nessus Scanners, and Nessus Manager.
• Strong Linux skills: installation, configuration, maintenance, and hardening.
• Experience on large-scale enterprise or global networks in a fast-paced environment.
• Understanding of the DoD Architecture Framework and DoD network architecture and strategic planning guidance.
• Experience planning, designing, and evaluating security systems and architectures.
• Experience delivering status reports and products to senior management and customers.

Nice to Have

• CSSP Infrastructure Support certification.
• Linux certifications (RHCSA, RHCE, Linux+, or similar).
• Scripting for automation (Python, Bash, PowerShell).
• Experience hardening Linux to DISA STIGs.

About RISA

Rolston Information Systems Assurance (RISA) is a Service-Disabled Veteran-Owned Small Business that has supported federal defense and intelligence cybersecurity missions for more than seventeen years. We are small on purpose: direct access to leadership, a real say in how the work gets done, and none of the layers that slow large primes down.

Benefits

Medical, dental, and vision insurance; 401(k) and Roth; Paid Time Off; and 11 paid Federal Holidays.

RISA is an Equal Opportunity Employer.

Upon receiving an offer of employment, all applicants will be required to do a background check, including a criminal record check and employment/education verification.