Vulnerability Assessment Analyst, Mid-Level

Independent Software; New York (NY); On-site; USD 110,000 - 170,000; Full time

Job summary

Independent Software in the United States seeks a Mid-Level Vulnerability Assessment Analyst to support vulnerability management and continuous monitoring across secure enterprise environments. You will administer Tenable Security Center and Nessus, perform assessments, analyze results, and work with technical teams to remediate risks.

Requirements include hands-on Tenable Security Center and Nessus experience, Linux/Windows administration, STIG compliance, and strong ISSE-relevant background.

Qualifications

• Hands-on vulnerability scanning and risk assessment experience.
• Experience documenting and reporting vulnerability findings clearly.
• Security control frameworks and STIG knowledge.
• Strong Linux/Windows system administration experience.

Responsibilities

• Maintain and optimize Tenable Security Center infrastructure.
• Perform vulnerability assessments and continuous monitoring using Tenable Security Center and Nessus.
• Install, configure, patch, and maintain Tenable Security Center and Nessus on Linux and Windows systems.
• Configure and fine‑tune scanning policies, asset lists, and vulnerability scanning activities.
• Review and analyze Nessus/ACAS scan results to identify vulnerabilities and potential security concerns.
• Mitigate STIG findings and vulnerabilities on Security Center and Nessus scanning servers.
• Analyze scan results and develop clear vulnerability assessment reports.
• Monitor and track vulnerability remediation through resolution.
• Collaborate with information systems security and technical teams to support timely remediation.
• Maintain accurate vulnerability and security records.
• Communicate security posture, vulnerabilities, and potential risks to technical teams, management, and stakeholders.

Skills

Tenable Security Center

Nessus

Linux/Windows admin

STIG compliance

Vulnerability management

Analytical skills

Communication

Education

Bachelor’s degree + 7 years ISSE

11 years substituted for degree

Tools

Tenable Security Center

Nessus

Job description

What You Will Do:

As a Mid-Level Vulnerability Assessment Analyst at Independent Software, you will support vulnerability management and continuous monitoring activities across secure enterprise environments. You will administer and optimize Tenable Security Center and Nessus infrastructure, conduct vulnerability assessments, analyze scan results, and work with technical teams to identify and remediate security risks.

This role requires strong hands‑on experience with vulnerability scanning, Linux and Windows systems, STIG compliance, and security assessment technologies.

Key Responsibilities:

• Maintain and optimize Tenable Security Center infrastructure
• Perform vulnerability assessments and continuous monitoring using Tenable Security Center and Nessus
• Install, configure, patch, and maintain Tenable Security Center and Nessus on Linux and Windows systems
• Configure and fine‑tune scanning policies, asset lists, and vulnerability scanning activities
• Review and analyze Nessus/ACAS scan results to identify vulnerabilities and potential security concerns
• Mitigate STIG findings and vulnerabilities on Security Center and Nessus scanning servers
• Analyze scan results and develop clear vulnerability assessment reports
• Monitor and track vulnerability remediation through resolution
• Collaborate with information systems security and technical teams to support timely remediation
• Maintain accurate vulnerability and security records
• Communicate security posture, vulnerabilities, and potential risks to technical teams, management, and stakeholders

Required Skills and Qualifications:

• Experience administering and supporting Tenable Security Center and Nessus
• Experience conducting vulnerability assessments and analyzing Nessus/ACAS scan results
• Experience identifying and remediating STIG findings and system vulnerabilities
• Strong Linux and Windows security administration experience
• Experience configuring vulnerability scanning policies and asset lists
• Knowledge of continuous monitoring and vulnerability management processes
• Experience tracking vulnerability remediation and reporting results
• Strong analytical, troubleshooting, documentation, and communication skills

Education and Experience:

• Bachelor’s degree in Computer Science, Information Assurance, Information Security Systems Engineering, or a related discipline from an accredited college or university plus seven (7) years of ISSE experience supporting programs and contracts of similar scope, type, and complexity; OR
• Eleven (11) years of relevant ISSE experience may be substituted for the Bachelor’s degree

Certifications:

• Current CISSP certification or higher‑level qualifying certification is required

Clearance Requirement:

• Must possess an active TS SCI with appropriate Polygraph to be considered for this role

Why Choose Independent Software:

At Independent Software, our people are the mission. We’ve built a company around collaboration, integrity, and innovation and we make sure our team has the tools and support to grow, succeed, and thrive.

When you join us, you will:

• Support critical national security missions that matter
• Be part of a close‑knit, employee‑first culture where your voice is heard
• Expand your skills through ongoing training, mentorship, and career development
• Enjoy competitive compensation, generous benefits, and work‑life balance

We’re an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.