Lead Vulnerability Management Analyst: Tenable & Cloud

General Dynamics - IT; Fort Bragg (NC); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

401K with company match

Comprehensive benefits

Paid time off

Job summary

GDIT seeks a SME Information Security Analyst (Vulnerability Management) to lead Tenable Security Center deployment and optimization on Linux/Red Hat. The role ensures DISA STIG/NSA compliance, manages scans, analyzes results, and produces leadership-ready reports for secure hybrid environments across cloud and on-prem.

The candidate must have deep technical expertise, strong analytical skills, and ability to collaborate with engineering, cybersecurity, and leadership teams across the command.

Qualifications

• Technical Training, Certification(s) or Degree with 10+ years of experience.
• Splunk or Elastic for Cloud.
• Endpoint Detection & Response (EDR) tools.
• Antivirus platforms.
• ServiceNow, Remedy, or similar ticketing systems.

Responsibilities

• Install, configure, and maintain Tenable Security Center on Linux/Red Hat.
• Ensure vulnerability management systems meet DISA STIG, NSA, and cybersecurity policy requirements.
• Manage credentialed and non-credentialed scans, schedules, asset groups, and plugin updates.
• Troubleshoot scanner/system issues to ensure accurate and continuous vulnerability detection.
• Analyze scan results to identify weaknesses, misconfigurations, and emerging threats.
• Validate findings, assess severity, and prioritize remediation based on mission needs.
• Produce recurring reports, dashboards, and metrics for Command Leadership.
• Translate complex technical findings into clear remediation guidance for engineering teams.
• Provide expert guidance on mitigation, configuration hardening, and patching strategies.
• Support development and maintenance of POA&M for unresolved vulnerabilities.
• Track remediation progress to ensure compliance with published cyber directives.
• Support enterprise communications systems and services to ensure secure hybrid operations.
• Assist with monitoring and securing cloud/on-prem workloads using enterprise security tools.
• Collaborate with cloud, network, and communications teams to ensure secure configurations and continuous monitoring.
• Support threat detection using Microsoft Defender for Endpoint and cloud environments including AWS, Azure, and Google Cloud.
• Conduct log analysis, event correlation, and investigation of suspicious activity.
• Assist with incident reporting, documentation, and escalation procedures.
• Contribute to detection rule tuning, alert fidelity improvements, and endpoint hardening.
• Identify coverage gaps and recommend improvements; document findings in After-Action Reports with SOC, EPT, and CTI partners.
• Develop guardrails, configuration baselines, and automation artifacts to reduce vulnerability recurrence.
• Support surge response activities through rapid scanning, validation, and remediation assistance.

Skills

Tech cert/degree

Splunk/Elastic

EDR tools

Antivirus platforms

IT ticketing

Education

DoD 8570 / 8140 certified

CompTIA Security+

CySA+

Network+

CASP+

GIAC certifications

Tools

Microsoft Defender for Endpoint

AWS/Azure/Google Cloud

Job description

GDIT seeks a SME Information Security Analyst (Vulnerability Management) to lead Tenable Security Center deployment and optimization on Linux/Red Hat. The role ensures DISA STIG/NSA compliance, manages scans, analyzes results, and produces leadership-ready reports for secure hybrid environments across cloud and on-prem.

The candidate must have deep technical expertise, strong analytical skills, and ability to collaborate with engineering, cybersecurity, and leadership teams across the command.