Systems Security Engineer

ELEVI Associates; Maryland; On-site; USD 65,000 - 151,000; Full time

Benefits offered by this job

Healthcare

Wellness program

Retirement plan

Continuing education

Paid time off

Job summary

ELEVI Associates in Annapolis Junction, MD, is seeking a Security Software Engineer to maintain and optimize the Tenable Security Center infrastructure and conduct vulnerability scanning across Linux/Windows environments. The role requires a current active security clearance with a polygraph and 4+ years of SWE experience on government or commercial contracts.

Responsibilities include patching, assessment, and remediation planning using Tenable Nessus and ACAS; configuring scanning policies; and

Qualifications

• Four (4) years of SWE experience in programs and contracts of similar scope, type, and complexity are required.
• Bachelor's degree in a technical discipline from an accredited college or university is required.
• Five (5) years of additional system administration experience may be substituted for a bachelor's degree.
• Security clearance with polygraph required.

Responsibilities

• Maintain and optimize the Tenable Security Center infrastructure.
• Conduct regular security patching, assessments and scans on Linux Security Center servers using Tenable Nessus.
• Mitigate STIGS/Vulnerabilities on Tenable Linux Security Center Servers and Windows/Linux Nessus Scanning Servers.
• Install and update Tenable Nessus Software on Linux/Windows Scanning Servers.
• Install and update Tenable Security Center Software on Linux Servers.
• Configure and fine-tune scanning policies and asset lists to ensure thorough vulnerability coverage.
• Keep abreast of the latest Tenable Security Center features and updates.
• Perform regular vulnerability assessments of multiple device types and Operating Systems using Tenable Security Center.
• Utilize Nessus Scanning Tool to identify vulnerabilities across customer assets on a Continuous Monitoring basis.
• Review Nessus/ACAS scan results and provide direction where required.
• Recognizes potential, successful, and unsuccessful scan results for efficiency in reporting compromises thorough reviews and analyses of relevant event detail and summary information.
• Analyze scan results and generate comprehensive vulnerability reports.
• Monitor and track vulnerability remediation progress.
• Collaborate with ISS and other teams to ensure timely vulnerability remediation.
• Communicate effectively with stakeholders about the security posture and potential risks.
• Prepare and deliver clear and concise reports to management and stakeholders.
• Maintain accurate records of security incidents and vulnerabilities.

Skills

SWE experience

Security clearance

Education

Bachelor's degree in a technical discipline

Tools

Tenable Nessus

Tenable Security Center

DISA STIGs

CIS Benchmarks

ACAS

Job description

Pay Range

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at ELEVI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families.

At ELEVI, you will receive comprehensive benefits such as healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The proposed salary range for this position is: 65,000-150,500

Why Work at ELEVI?

T o become an ELEVI employee is to become an integral part of the team. From Federal to Commercial, ELEVI offers our employees the ability to expand skills and fully engage their minds and passions. Each member of the team enjoys the opportunity to expand their career to meet their individual goals and objectives. We celebrate the ideas that bring about positive change, and the diverse talents and backgrounds that come together to create those ideas. Our benefit packages encompass competitive compensation, financial and counseling services, retirement options, and health insurance programs. Coupled with work/life benefits to address significant life problems as well as everyday problems involved in juggling work, family, and life. We trust you to take the time you need when you feel it's appropriate. No need to keep track or save up. We trust our employees and empower them to shape their work themselves so that we can achieve the best possible results.

ELEVI Is an equal opportunity employer (EOE) that empowers our people. It is the policy of ELEVI to provide equal employment opportunities to all employees and employment applicants—without regard to unlawful considerations of race, religion, color, national origin, sex, sexual orientation, gender identity or expression, age, sensory, physical or mental disability, marital status, veteran or military status, genetic information, or any other classification protected by applicable local, state, or federal laws. We fearlessly drive change, because without diversity of thought and a commitment to equality for all, there is no moving forward. Reasonable accommodations are available for qualified individuals with disabilities, upon request. This policy applies to all aspects of employment, including, but not limited to, hiring, job assignment, compensation, promotion, benefits, training, discipline, and termination.

Job Requirements

In Order to Join the ELEVI Team you will need to have the following PT- Evenings and weekends You must be willing to work in the Annapolis Junction, MD, area You must have a current and active security clearance with polygraph Four (4) yearsof experienceas an SWE inprograms andcontracts ofsimilar scope, type, and complexity are required. Bachelor's degree in a technical discipline from an accredited college or university is required. Five (5) years of additional system administration experience may be substituted for a bachelor’s degree. Sec+ or higher required Familiarity with DISA STIGs, Tenable Audit files, and / or CIS Benchmarks Hands-on operational experience with enterprise vulnerability management and scanning solutions, such as Tenable Knowledge of system and application security threats and vulnerabilities Working knowledge of networking, Linux/Unix, Windows administration, patch deployment and system configuration

Responsibilities

• Maintain and optimize the Tenable Security Center infrastructure.
• Conduct regular security patching, assessments and scans on Linux Security Center servers using Tenable Nessus.
• Mitigate STIGS/Vulnerabilities on Tenable Linux Security Center Servers and Windows/Linux Nessus Scanning Servers.
• Install and update Tenable Nessus Software on Linux/Windows Scanning Servers.
• Install and update Tenable Security Center Software on Linux Servers.
• Configure and fine-tune scanning policies and asset lists to ensure thorough vulnerability coverage.
• Keep abreast of the latest Tenable Security Center features and updates.
• Perform regular vulnerability assessments of multiple device types and Operating Systems using Tenable Security Center.
• Utilize Nessus Scanning Tool to identify vulnerabilities across customer assets on a Continuous Monitoring basis.
• Review Nessus/ACAS scan results and provide direction where required.
• Recognizes potential, successful, and unsuccessful scan results for efficiency in reporting compromises thorough reviews and analyses of relevant event detail and summary information.
• Analyze scan results and generate comprehensive vulnerability reports.
• Monitor and track vulnerability remediation progress.
• Collaborate with ISS and other teams to ensure timely vulnerability remediation.
• Communicate effectively with stakeholders about the security posture and potential risks.
• Prepare and deliver clear and concise reports to management and stakeholders.
• Maintain accurate records of security incidents and vulnerabilities.