Vulnerability Assessment Analyst (TS/SCI Clearance with Full Scope Polygraph Required)

J&T; Annapolis (MD); On-site; USD 78,000 - 94,000; Full time

Job summary

J&T is seeking a Vulnerability Management / Tenable Security Specialist to maintain and optimize enterprise Tenable Security Center and Nessus infrastructure. The role conducts vulnerability assessments, performs DISA STIG remediations, and collaborates with ISS to drive remediation across environments.

The candidate will configure policies, review scan results, and deliver clear risk briefs to technical teams and management, ensuring documentation is current and accurate.

Qualifications

• Active TS/SCI with current polygraph.
• High School Diploma / GED with 11+ years of relevant experience, or a Bachelor's with 7+ years.
• Familiarity with DISA STIGs, Tenable Audit files, and CIS Benchmarks.
• Hands-on experience with Tenable Security Center and Nessus/ACAS.
• Working knowledge of security threats, Windows/Linux administration, patch deployment, and system configuration.
• DoD 8570 / Baseline CEH certification.

Responsibilities

• Maintain and optimize the Tenable Security Center infrastructure.
• Perform regular security patching, assessments, and scans on Linux Security Center servers using Tenable Nessus.
• Mitigate DISA STIGs and vulnerabilities on Tenable Linux Security Center and Windows/Linux Nessus hosts.
• Install, configure, and update Tenable Nessus and Tenable Security Center software across Linux and Windows servers.
• Configure scanning policies, credentials, and asset lists for comprehensive coverage.
• Execute continuous vulnerability assessments across diverse device types and OSes.
• Review Nessus/ACAS scan results and differentiate true positives from false positives.
• Analyze data, generate vulnerability reports, and track remediation progress to deadlines.
• Collaborate with ISS teams and admins to prioritize fixes.
• Prepare concise security posture briefs for technical teams and management.
• Maintain up-to-date documentation of identified vulnerabilities and incidents.

Skills

Self-starter mindset

Analytical problem-solving

Attention to detail

Independent task ownership

Education

High School Diploma / GED

Bachelor’s degree

Tools

Tenable Security Center

Nessus/ACAS

Job description

Position: Vulnerability Management / Tenable Security Specialist

Position Type: Full-Time

Security Clearance: TS/SCI with current Polygraph

Compensation: $78,000 – $94,000

Role Overview

We are seeking a Vulnerability Management Specialist to maintain, configure, and optimize enterprise Tenable Security Center and Nessus scanning infrastructure. In this role, you will perform continuous vulnerability assessments, execute system patching and DISA STIG remediations on scanning servers, analyze scan results, and collaborate with Information System Security (ISS) personnel to track and drive vulnerability remediation across customer environments.

Primary Responsibilities

• Maintain and optimize the Tenable Security Center infrastructure.
• Perform regular security patching, assessments, and scans on Linux Security Center servers using Tenable Nessus.
• Mitigate DISA STIGs and vulnerabilities on Tenable Linux Security Center servers and Windows/Linux Nessus scanning hosts.
• Install, configure, and update Tenable Nessus and Tenable Security Center software across Linux and Windows server environments.
• Configure and fine-tune scanning policies, credentials, and asset lists to ensure comprehensive vulnerability coverage.
• Execute continuous vulnerability assessments across diverse device types, appliances, and operating systems.
• Review and interpret Nessus/ACAS scan results; differentiate between false positives, successful scans, and potential system compromises.
• Analyze scanning data, generate comprehensive vulnerability reports, and track remediation progress against established timelines.
• Collaborate with ISS teams and system administrators to prioritize and validate vulnerability fixes.
• Prepare and deliver clear, concise security posture and risk assessment briefs to technical teams and management.
• Maintain accurate, up-to-date documentation and records of identified vulnerabilities and security incidents.

Required Qualifications

• Clearance: Active TS/SCI security clearance with a current polygraph.
• High School Diploma / GED with at least 11 years of relevant experience, OR
• Bachelor’s degree with at least 7 years of relevant experience.
• Compliance Standards: Familiarity with DISA STIGs, Tenable Audit files, and CIS Benchmarks.
• Vulnerability Tooling: Hands-on operational experience with enterprise vulnerability scanning tools, specifically Tenable Security Center and Nessus / ACAS.
• Technical Knowledge: Working knowledge of system/application security threats, networking protocols, Windows and Linux/Unix system administration, patch deployment workflows, and system configuration.
• Certifications (DoD 8570 / Baseline): Certified Ethical Hacker (CEH) certification.

Desired Qualifications

• In-depth knowledge of advanced vulnerability assessment methodologies, remediation workflows, and industry best practices.
• Self-starter mindset with the ability to own technical tasks independently from scoping through remediation verification.
• Strong analytical, troubleshooting, and problem-solving skills with meticulous attention to detail.