Vulnerability Assessment Analyst (TS/SCI Clearance with Full Scope Polygraph Required)

J&T Business Consulting; Annapolis (MD); On-site; USD 73,000 - 99,000; Full time

Job summary

J&T Business Consulting in Annapolis, MD, is seeking a Vulnerability Management Specialist to manage Tenable Security Center and Nessus scanning across enterprise environments. You will perform continuous vulnerability assessments, patching, and DISA STIG remediations on scanning servers.

The role requires hands-on Tenable/Nessus experience, CIS benchmarks, and strong analytical skills to interpret results and drive remediation with ISS teams.

Qualifications

• Active TS/SCI security clearance with a current polygraph.
• DISA STIGs familiarity, CIS Benchmarks.
• Hands-on experience with enterprise vulnerability scanning tools (Tenable/Nessus/ACAS).
• Windows and Linux system administration knowledge and patch deployment workflows.
• CEH certification.

Responsibilities

• Maintain and optimize Tenable Security Center infrastructure.
• Perform regular vulnerability assessments and scans on Linux/Windows servers.
• Mitigate DISA STIGs and vulnerabilities on scanning hosts.
• Configure scanning policies, credentials, and asset lists for comprehensive coverage.
• Analyze scan results and generate remediation progress reports.
• Collaborate with ISS teams to prioritize fixes and deliver security briefs.

Skills

Vulnerability management

Threat analysis

Remediation coordination

Analytical skills

Education

Bachelor's degree in a relevant field

High School Diploma or GED with 11+ years of experience

Tools

Tenable Security Center

Nessus / ACAS

Job description

Vulnerability Assessment Analyst (TS/SCI Clearance with Full Scope Polygraph Required)

Annapolis, United States | Posted on 09/02/2026

Position: Vulnerability Management / Tenable Security Specialist

Position Type: Full-Time

Security Clearance: TS/SCI with current Polygraph

Compensation: $78,000 – $94,000

Role Overview

We are seeking a Vulnerability Management Specialist to maintain, configure, and optimize enterprise Tenable Security Center and Nessus scanning infrastructure. In this role, you will perform continuous vulnerability assessments, execute system patching and DISA STIG remediations on scanning servers, analyze scan results, and collaborate with Information System Security (ISS) personnel to track and drive vulnerability remediation across customer environments.

Primary Responsibilities

• Maintain and optimize the Tenable Security Center infrastructure.
• Perform regular security patching, assessments, and scans on Linux Security Center servers using Tenable Nessus.
• Mitigate DISA STIGs and vulnerabilities on Tenable Linux Security Center servers and Windows/Linux Nessus scanning hosts.
• Install, configure, and update Tenable Nessus and Tenable Security Center software across Linux and Windows server environments.
• Configure and fine-tune scanning policies, credentials, and asset lists to ensure comprehensive vulnerability coverage.
• Execute continuous vulnerability assessments across diverse device types, appliances, and operating systems.
• Review and interpret Nessus/ACAS scan results; differentiate between false positives, successful scans, and potential system compromises.
• Analyze scanning data, generate comprehensive vulnerability reports, and track remediation progress against established timelines.
• Collaborate with ISS teams and system administrators to prioritize and validate vulnerability fixes.
• Prepare and deliver clear, concise security posture and risk assessment briefs to technical teams and management.
• Maintain accurate, up-to-date documentation and records of identified vulnerabilities and security incidents.

Required Qualifications

• Clearance: Active TS/SCI security clearance with a current polygraph.
• High School Diploma / GED with at least 11 years of relevant experience, OR
• Bachelor’s degree with at least 7 years of relevant experience.
• Compliance Standards: Familiarity with DISA STIGs, Tenable Audit files, and CIS Benchmarks.
• Vulnerability Tooling: Hands-on operational experience with enterprise vulnerability scanning tools, specifically Tenable Security Center and Nessus / ACAS.
• Technical Knowledge: Working knowledge of system/application security threats, networking protocols, Windows and Linux/Unix system administration, patch deployment workflows, and system configuration.
• Certifications (DoD 8570 / Baseline): Certified Ethical Hacker (CEH) certification.

Desired Qualifications

• In-depth knowledge of advanced vulnerability assessment methodologies, remediation workflows, and industry best practices.
• Self-starter mindset with the ability to own technical tasks independently from scoping through remediation verification.
• Strong analytical, troubleshooting, and problem-solving skills with meticulous attention to detail.