Vulnerability Assessment Analyst (TS/SCI Clearance with Full Scope Polygraph Required)

J T; Annapolis (MD); On-site; USD 78,000 - 94,000; Full time

Job summary

J T in Annapolis, MD seeks a Vulnerability Management / Tenable Security Specialist to maintain and optimize enterprise Tenable Security Center and Nessus scanning infrastructure. You will perform continuous vulnerability assessments, patching, and DISA STIG remediations on servers, collaborating with ISS to drive remediation across environments.

This full-time role requires TS/SCI with a current polygraph and CEH certification, with extensive experience in vulnerability tooling and CIS

Qualifications

• Active TS/SCI clearance with a current polygraph.
• 11+ years of relevant experience or a Bachelore2e9s degree with 7+ years.
• Familiarity with DISA STIGs, Tenable Audit files, and CIS Benchmarks.

Responsibilities

• Maintain and optimize the Tenable Security Center infrastructure.
• Perform regular security patching, assessments, and scans on Linux systems using Tenable Nessus.
• Mitigate DISA STIGs and vulnerabilities on Tenable Linux/Windows hosts.
• Install, configure, and update Tenable Nessus and Security Center across servers.
• Configure and tune scanning policies, credentials, and asset lists.
• Execute continuous vulnerability assessments across diverse devices and OS.
• Review Nessus/ACAS scan results and distinguish false positives from real issues.
• Analyze data, generate reports, and track remediation progress against timelines.
• Collaborate with ISS teams to prioritize fixes and validate remediation.
• Prepare concise security posture briefs for technical teams and mgmt.
• Maintain up-to-date documentation of vulnerabilities and incidents.

Skills

TS/SCI clearance

Tenable Security Center

Nessus / ACAS

DISA STIGs

CEH

Linux/Windows admin

Vulnerability scanning

Education

Bachelore2e9s degree

High School Diploma / GED

Tools

Tenable Security Center

Nessus

ACAS

Job description

Position: Vulnerability Management / Tenable Security Specialist

Position Type: Full-Time

Security Clearance: TS/SCI with current Polygraph

Compensation: $78,000 – $94,000

Role Overview

We are seeking a Vulnerability Management Specialist to maintain, configure, and optimize enterprise Tenable Security Center and Nessus scanning infrastructure. In this role, you will perform continuous vulnerability assessments, execute system patching and DISA STIG remediations on scanning servers, analyze scan results, and collaborate with Information System Security (ISS) personnel to track and drive vulnerability remediation across customer environments.

Primary Responsibilities

• Maintain and optimize the Tenable Security Center infrastructure.
• Perform regular security patching, assessments, and scans on Linux Security Center servers using Tenable Nessus.
• Mitigate DISA STIGs and vulnerabilities on Tenable Linux Security Center servers and Windows/Linux Nessus scanning hosts.
• Install, configure, and update Tenable Nessus and Tenable Security Center software across Linux and Windows server environments.
• Configure and fine-tune scanning policies, credentials, and asset lists to ensure comprehensive vulnerability coverage.
• Execute continuous vulnerability assessments across diverse device types, appliances, and operating systems.
• Review and interpret Nessus/ACAS scan results; differentiate between false positives, successful scans, and potential system compromises.
• Analyze scanning data, generate comprehensive vulnerability reports, and track remediation progress against established timelines.
• Collaborate with ISS teams and system administrators to prioritize and validate vulnerability fixes.
• Prepare and deliver clear, concise security posture and risk assessment briefs to technical teams and management.
• Maintain accurate, up-to-date documentation and records of identified vulnerabilities and security incidents.

Required Qualifications

• Clearance: Active TS/SCI security clearance with a current polygraph.
• Education & Experience: High School Diploma / GED with at least 11 years of relevant experience, OR
• Bachelor’s degree with at least 7 years of relevant experience.
• Compliance Standards: Familiarity with DISA STIGs, Tenable Audit files, and CIS Benchmarks.
• Vulnerability Tooling: Hands-on operational experience with enterprise vulnerability scanning tools, specifically Tenable Security Center and Nessus / ACAS.
• Technical Knowledge: Working knowledge of system/application security threats, networking protocols, Windows and Linux/Unix system administration, patch deployment workflows, and system configuration.
• Certifications (DoD 8570 / Baseline): Certified Ethical Hacker (CEH) certification.

Desired Qualifications

• In-depth knowledge of advanced vulnerability assessment methodologies, remediation workflows, and industry best practices.
• Self-starter mindset with the ability to own technical tasks independently from scoping through remediation verification.
• Strong analytical, troubleshooting, and problem-solving skills with meticulous attention to detail.