Senior Vulnerability & Endpoint Security Administrator

Sarela Technology Solutions; Fort Belvoir (VA); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Paid time off

Profit sharing

Tuition assistance

Vision insurance

401(k)

401(k) matching

Dental insurance

Health insurance

Job summary

SarelaTech is seeking a Vulnerability Management and Endpoint Security Administrator to provide cybersecurity expertise supporting a DoD contract. This role focuses on assessing enterprise vulnerability posture and guiding remediation across Windows, Linux, and virtual environments within CONUS/OCONUS operations.

The ideal candidate will have strong ACAS/Nessus and Tanium experience, knowledge of Trellix endpoint-security, and the ability to balance cybersecurity risk with operational needs

Qualifications

• Bachelor’s degree with 4+ years in cybersecurity or 8+ years without degree.
• 4+ years vulnerability management and endpoint security in an enterprise.
• Strong analysis of vulnerabilities and risk-based remediation.
• Expertise with ACAS/Nessus scanning and reporting.
• Experience with Tanium for endpoint visibility and remediation.
• Knowledge of Trellix endpoint security and configuration.
• Familiarity with STIGs and security-hardening practices.
• DoD information assurance standards and IAT Level II baseline certs.
• Active TS/SCI clearance.

Responsibilities

• Independently analyze enterprise vulnerability and endpoint-security posture across Windows, Linux, virtual, and other environments and recommend technical and risk-based actions.
• Administer ACAS/Nessus vulnerability-management capabilities, including scan architecture, policies, credentialed scanning, reporting, and troubleshooting.
• Perform in-depth vulnerability and risk analysis; validate findings; assess impacts; establish risk-based remediation priorities.
• Exercise independent judgment in evaluating risks, exceptions, and remediation strategies.
• Leverage Tanium to analyze endpoint visibility, asset inventory, compliance, and remediation requirements.
• Analyze endpoint-security posture using Trellix; investigate alerts and policy issues.
• Correlate data to identify systemic risks and prioritise enterprise remediation.
• Develop and recommend technical solutions for complex vulnerability-management issues.
• Evaluate vulnerability exceptions and risk-acceptance requests; provide risk assessments.
• Analyze endpoint configurations and security baselines; recommend hardening aligned with STIGs.
• Develop metrics, dashboards, and executive summaries for leadership decisions.
• Provide cybersecurity expertise during incident-response, threat-hunting, and containment activities.
• Evaluate changes to endpoint architectures and tooling; provide technical recommendations.
• Improve vulnerability-management processes and operating procedures.
• Develop standards, procedures, and knowledge articles for vulnerability-management.
• Serve as a technical advisor to system owners and leadership on risk and remediation.
• Manage competing priorities and determine approaches within program and security requirements.
• Work in a fast-paced environment with independent decision-making on cybersecurity objectives.

Skills

ACAS/Nessus

Tanium

Trellix Endpoint Security

Windows

Linux

Vulnerability analysis

STIGs knowledge

Education

Bachelor’s degree in a relevant field

Tools

ACAS/Nessus

Tanium

Trellix ePolicy Orchestrator

Job description

SarelaTech is seeking a Vulnerability Management and Endpoint Security Administrator to provide cybersecurity expertise supporting a DoD contract. This role focuses on assessing enterprise vulnerability posture and guiding remediation across Windows, Linux, and virtual environments within CONUS/OCONUS operations.

The ideal candidate will have strong ACAS/Nessus and Tanium experience, knowledge of Trellix endpoint-security, and the ability to balance cybersecurity risk with operational needs