Vulnerability Assessment Analyst (TS/SCI Clearance with Full Scope Polygraph Required)

Zohorecruit; Annapolis (MD); On-site; USD 78,000 - 94,000; Full time

Job summary

Zohorecruit in Annapolis, MD seeks a Vulnerability Assessment Analyst to maintain Tenable Security Center and Nessus scanning infrastructure. You will perform continuous vulnerability assessments, patch management, and DISA STIG remediations while coordinating with ISS teams to drive remediation across customer environments.

The role requires TS/SCI clearance with current Polygraph, relevant experience, and familiarity with DISA STIGs and CIS Benchmarks.

Qualifications

• Active TS/SCI security clearance with current polygraph.
• Bachelor’s degree with at least 7 years of relevant experience, or HS diploma with 11+ years of experience.
• Familiarity with DISA STIGs, CIS Benchmarks, Tenable Audit files.

Responsibilities

• Maintain and optimize the Tenable Security Center infrastructure.
• Perform regular patching, assessments, and scans on Linux Security Center servers using Tenable Nessus.
• Mitigate DISA STIGs and vulnerabilities on Tenable Linux Security Center servers and Windows/Linux Nessus scanning hosts.
• Install, configure, and update Tenable Nessus and Tenable Security Center software across Linux and Windows server environments.
• Configure and fine-tune scanning policies, credentials, and asset lists to ensure comprehensive vulnerability coverage.
• Execute continuous vulnerability assessments across diverse device types and operating systems.
• Review Nessus/ACAS scan results; differentiate false positives, successful scans, and potential compromises.
• Analyze scanning data, generate vulnerability reports, and track remediation progress against timelines.
• Collaborate with ISS teams and system administrators to prioritize and validate vulnerability fixes.
• Prepare and deliver security posture and risk briefs to technical teams and management.
• Maintain accurate documentation of identified vulnerabilities and incidents.

Skills

Vulnerability management

Vulnerability assessment

Remediation workflows

Policy guidance

Education

Bachelor’s degree + 7 years experience

High School Diploma / GED + 11 years experience

Tools

Tenable Security Center

Nessus / ACAS

Job description

Vulnerability Assessment Analyst (TS/SCI Clearance with Full Scope Polygraph Required)

Annapolis, United States | Posted on 10/01/2026

Position: Vulnerability Management / Tenable Security Specialist

Position Type: Full-Time

Security Clearance: TS/SCI with current Polygraph

Compensation: $78,000 – $94,000

Role Overview

We are seeking a Vulnerability Management Specialist to maintain, configure, and optimize enterprise Tenable Security Center and Nessus scanning infrastructure. In this role, you will perform continuous vulnerability assessments, execute system patching and DISA STIG remediations on scanning servers, analyze scan results, and collaborate with Information System Security (ISS) personnel to track and drive vulnerability remediation across customer environments.

Primary Responsibilities

• Maintain and optimize the Tenable Security Center infrastructure.
• Perform regular security patching, assessments, and scans on Linux Security Center servers using Tenable Nessus.
• Mitigate DISA STIGs and vulnerabilities on Tenable Linux Security Center servers and Windows/Linux Nessus scanning hosts.
• Install, configure, and update Tenable Nessus and Tenable Security Center software across Linux and Windows server environments.
• Configure and fine-tune scanning policies, credentials, and asset lists to ensure comprehensive vulnerability coverage.
• Execute continuous vulnerability assessments across diverse device types, appliances, and operating systems.
• Review and interpret Nessus/ACAS scan results; differentiate between false positives, successful scans, and potential system compromises.
• Analyze scanning data, generate comprehensive vulnerability reports, and track remediation progress against established timelines.
• Collaborate with ISS teams and system administrators to prioritize and validate vulnerability fixes.
• Prepare and deliver clear, concise security posture and risk assessment briefs to technical teams and management.
• Maintain accurate, up-to-date documentation and records of identified vulnerabilities and security incidents.

Required Qualifications

• Clearance: Active TS/SCI security clearance with a current polygraph.
• Education & Experience:
• High School Diploma / GED with at least 11 years of relevant experience, OR
• Bachelor’s degree with at least 7 years of relevant experience.
• Compliance Standards: Familiarity with DISA STIGs, Tenable Audit files, and CIS Benchmarks.
• Vulnerability Tooling: Hands-on operational experience with enterprise vulnerability scanning tools, specifically Tenable Security Center and Nessus / ACAS.
• Technical Knowledge: Working knowledge of system/application security threats, networking protocols, Windows and Linux/Unix system administration, patch deployment workflows, and system configuration.

Certifications (DoD 8570 / Baseline)

• Certified Ethical Hacker (CEH) certification.

Desired Qualifications

• In-depth knowledge of advanced vulnerability assessment methodologies, remediation workflows, and industry best practices.
• Self-starter mindset with the ability to own technical tasks independently from scoping through remediation verification.
• Strong analytical, troubleshooting, and problem-solving skills with meticulous attention to detail.