Vulnerability Assessment Analyst

CyberCore Technologies; Corridor North (MD); On-site; USD 100,000 - 140,000; Full time

Job summary

CyberCore Technologies is seeking a security professional to maintain Tenable Security Center infrastructure, perform regular patching and vulnerability scanning on Linux/Windows servers, and mitigate STIGs.

You will generate comprehensive reports, coordinate remediation with ISS and stakeholders, and keep leadership informed about risk posture and ongoing improvements.

Qualifications

• Experience maintaining Tenable Security Center infrastructure.
• Patching, assessments and scans on Linux Security Center servers using Nessus.
• Experience mitigating STIGS and vulnerabilities on Tenable servers.

Responsibilities

• Maintain and optimize the Tenable Security Center infrastructure.
• Configure and fine-tune scanning policies and asset lists.
• Review scan results and provide direction.
• Monitor vulnerability remediation progress and report.
• Communicate security posture to stakeholders.
• Prepare vulnerability reports for management.

Skills

Vulnerability assessment

Security reporting

Stakeholder communication

Collaboration

Threat monitoring

Tools

Tenable Nessus

Nessus Scanning

ACAS

Tenable Security Center

Linux

Windows

Job description

• Maintain and optimize the Tenable Security Center infrastructure.
• Conduct regular security patching, assessments and scans on Linux Security Center servers using Tenable Nessus.
• Mitigate STIGS/Vulnerabilities on Tenable Linux Security Center Servers and Windows/Linux Nessus Scanning Servers.
• Install and update Tenable Nessus Software on Linux/Windows Scanning Servers.
• Install and update Tenable Security Center Software on Linux Servers.
• Configure and fine-tune scanning policies and asset lists to ensure thorough vulnerability coverage.
• Keep abreast of the latest Tenable Security Center features and updates.
• Perform regular vulnerability assessments of multiple device types and Operating Systems using Tenable Security Center.
• Utilize Nessus Scanning Tool to identify vulnerabilities across customer assets on a Continuous Monitoring basis.
• Review Nessus/ACAS scan results and provide direction where required.
• Recognizes potential, successful, and unsuccessful scan results for efficiency in reporting compromises through reviews and analyses of relevant event detail and summary information.
• Analyze scan results and generate comprehensive vulnerability reports.
• Monitor and track vulnerability remediation progress.
• Collaborate with ISS and other teams to ensure timely vulnerability remediation.
• Communicate effectively with stakeholders about the security posture and potential risks.
• Prepare and deliver clear and concise reports to management and stakeholders.
• Maintain accurate records of security incidents and vulnerabilities.