Top Secret VM Compliance & Monitoring Engineer

ShorePoint, LLC; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

PTO 144 hours

11 holidays

Health insurance coverage 85%

401(k)

Certification maintenance & reimburse

Job summary

ShorePoint, LLC seeks a Compliance and Continuous Monitoring Engineer - Vulnerability Management (Top Secret Clearance) to strengthen our federal cybersecurity posture. You will conduct security assessments, vulnerability management, and continuous monitoring, providing hands-on scanning, reporting, and compliance support to enterprise systems.

You will work with leadership to analyze findings, develop SARs/RARs, and communicate risk through dashboards and executive reports.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Mathematics, Engineering or related field (or 10+ years IT experience in lieu of degree).
• One or more of CISSP, GIAC, GCIA or GCIH certifications.
• Ability to analyze complex requirements and translate them into clear, actionable tasks.
• Experience with enterprise‑class scanning tools: Tenable Nessus, Tenable Security Center, AppDetective, DbProtect, Web Inspect.
• Familiarity with NIST 800-53/800-53A, SANS and OWASP Top 10 vulnerabilities and best practices.

Responsibilities

• Work with organizations to ensure full comprehension of security controls; conduct site visits as required.
• Assist with compliance assessments using tailored control matrices; provide expert assessment support.
• Conduct annual reviews of security controls to ensure continued compliance.
• Establish footholds on endpoints to provide day‑to‑day visibility into enterprise security posture.
• Develop and maintain processes and best practices for evaluating assessment and authorization data.
• Use industry-standard automation tools to review system configurations and security control compliance.
• Conduct NIST control assessments in support of system authorization and continuous monitoring.
• Develop and maintain SARs and RARs for risk reporting.
• Employ a scan‑patch‑scan methodology to ensure remediation of vulnerabilities.
• Conduct weekly to bi-weekly vulnerability scanning and report findings.

Skills

Vulnerability management

Security assessments

NIST 800-53

OWASP Top 10

Communication skills

Education

Bachelor’s degree in Cybersecurity or related field

10+ years IT experience in lieu of degree

Tools

Tenable Nessus

Tenable Security Center

AppDetective

DbProtect

Web Inspect

Job description

ShorePoint, LLC seeks a Compliance and Continuous Monitoring Engineer - Vulnerability Management (Top Secret Clearance) to strengthen our federal cybersecurity posture. You will conduct security assessments, vulnerability management, and continuous monitoring, providing hands-on scanning, reporting, and compliance support to enterprise systems.

You will work with leadership to analyze findings, develop SARs/RARs, and communicate risk through dashboards and executive reports.