Systems Security Engineer – Tenable & STIG Specialist

Elevi-Associates,-LLC-; Maryland; On-site; USD 65,000 - 151,000; Full time

Job summary

ELEVI seeks a Security Engineer to join our security operations and vulnerability management team in the Annapolis Junction, MD area. The role requires an active polygraph security clearance and hands-on experience with Tenable Nessus and Security Center to manage risk across Linux and Windows servers.

You will collaborate with ISS and other teams to ensure timely remediation, develop comprehensive vulnerability reports, and communicate security posture to stakeholders while maintaining thorough

Qualifications

• Four (4) years of experience as an SWE in programs and contracts of similar scope, type, and complexity are required.
• Bachelor's degree in a technical discipline from an accredited college or university is required. Five (5) years of additional system administration experience may be substituted for a bachelor’s degree.
• Sec+ or higher is required.
• Familiarity with DISA STIGs, Tenable Audit files, and CIS Benchmarks.
• Hands-on operational experience with enterprise vulnerability management and scanning solutions, such as Tenable.
• Knowledge of system and application security threats and vulnerabilities.
• Working knowledge of networking, Linux/Unix, Windows administration, patch deployment and system configuration.

Responsibilities

• Maintain and optimize the Tenable Security Center infrastructure.
• Conduct regular security patching, assessments and scans on Linux Security Center servers using Tenable Nessus.
• Mitigate STIGS/Vulnerabilities on Tenable Linux Security Center Servers and Windows/Linux Nessus Scanning Servers.
• Install and update Tenable Nessus Software on Linux/Windows Scanning Servers.
• Install and update Tenable Security Center Software on Linux Servers.
• Configure and fine-tune scanning policies and asset lists to ensure thorough vulnerability coverage.
• Keep abreast of the latest Tenable Security Center features and updates.
• Perform regular vulnerability assessments of multiple device types and Operating Systems using Tenable Security Center.
• Utilize Nessus Scanning Tool to identify vulnerabilities across customer assets on a Continuous Monitoring basis.
• Review Nessus/ACAS scan results and provide direction where required.
• Recognizes potential, successful, and unsuccessful scan results for efficiency in reporting compromises thorough reviews and analyses of relevant event detail and summary information.
• Analyze scan results and generate comprehensive vulnerability reports.
• Monitor and track vulnerability remediation progress.
• Collaborate with ISS and other teams to ensure timely vulnerability remediation.
• Communicate effectively with stakeholders about the security posture and potential risks.
• Prepare and deliver clear and concise reports to management and stakeholders.
• Maintain accurate records of security incidents and vulnerabilities.

Skills

Security clearance

Sec+ or higher

Tenable Nessus

DISA STIGs familiarity

Linux/Unix admin

Windows admin

Vulnerability management

Network fundamentals

Education

Bachelor's degree in a technical discipline

Tools

Tenable Security Center

Nessus

CIS Benchmarks

Job description

ELEVI seeks a Security Engineer to join our security operations and vulnerability management team in the Annapolis Junction, MD area. The role requires an active polygraph security clearance and hands-on experience with Tenable Nessus and Security Center to manage risk across Linux and Windows servers.

You will collaborate with ISS and other teams to ensure timely remediation, develop comprehensive vulnerability reports, and communicate security posture to stakeholders while maintaining thorough