Vulnerability Assessment Analyst (TS/SCI Clearance with Full Scope Polygraph Required)

J&T Business Consulting; Annapolis (MD); On-site; USD 78,000 - 94,000; Full time

Job summary

J&T Business Consulting seeks a Vulnerability Assessment Analyst to manage and optimize enterprise Tenable Security Center and Nessus scanning infrastructure in an on-site Annapolis environment.

The role requires ongoing vulnerability assessments, DISA STIG remediations, and collaboration with ISS teams to drive remediation timelines. A TS/SCI clearance with polygraph is required, with 11+ years of experience or a Bachelors with 7+ years.

Qualifications

• Clearance TS/SCI with current Polygraph is required.
• Experience with vulnerability scanning tools and remediation workflows is essential.
• Familiarity with DISA STIGs, CIS Benchmarks and audit files is preferred.

Responsibilities

• Maintain and optimize Tenable Security Center infrastructure.
• Perform regular vulnerability assessments and scans on Linux/Windows servers.
• Configure scanning policies, credentials, and asset lists for comprehensive coverage.

Skills

Vulnerability management

Threat analysis

Security awareness

Education

High School Diploma / GED

Bachelor's degree

Tools

Tenable Security Center

Nessus / ACAS

Job description

Vulnerability Assessment Analyst (TS/SCI Clearance with Full Scope Polygraph Required)

Annapolis, United States | Posted on 09/18/2026

Position: Vulnerability Management / Tenable Security Specialist

Position Type: Full-Time

Security Clearance: TS/SCI with current Polygraph

Compensation: $78,000 - $94,000

Role Overview

We are seeking a Vulnerability Management Specialist to maintain, configure, and optimize enterprise Tenable Security Center and Nessus scanning infrastructure. In this role, you will perform continuous vulnerability assessments, execute system patching and DISA STIG remediations on scanning servers, analyze scan results, and collaborate with Information System Security (ISS) personnel to track and drive vulnerability remediation across customer environments.

Primary Responsibilities

• Maintain and optimize the Tenable Security Center infrastructure.
• Perform regular security patching, assessments, and scans on Linux Security Center servers using Tenable Nessus.
• Mitigate DISA STIGs and vulnerabilities on Tenable Linux Security Center servers and Windows/Linux Nessus scanning hosts.
• Install, configure, and update Tenable Nessus and Tenable Security Center software across Linux and Windows server environments.
• Configure and fine-tune scanning policies, credentials, and asset lists to ensure comprehensive vulnerability coverage.
• Execute continuous vulnerability assessments across diverse device types, appliances, and operating systems.
• Review and interpret Nessus/ACAS scan results; differentiate between false positives, successful scans, and potential system compromises.
• Analyze scanning data, generate comprehensive vulnerability reports, and track remediation progress against established timelines.
• Collaborate with ISS teams and system administrators to prioritize and validate vulnerability fixes.
• Prepare and deliver clear, concise security posture and risk assessment briefs to technical teams and management.
• Maintain accurate, up-to-date documentation and records of identified vulnerabilities and security incidents.

Required Qualifications

• Clearance: Active TS/SCI security clearance with a current polygraph.
• Education & Experience: High School Diploma / GED with at least 11 years of relevant experience, OR Bachelor's degree with at least 7 years of relevant experience.
• Compliance Standards: Familiarity with DISA STIGs, Tenable Audit files, and CIS Benchmarks.
• Vulnerability Tooling: Hands-on operational experience with enterprise vulnerability scanning tools, specifically Tenable Security Center and Nessus / ACAS.
• Technical Knowledge: Working knowledge of system/application security threats, networking protocols, Windows and Linux/Unix system administration, patch deployment workflows, and system configuration.
• Certifications (DoD 8570 / Baseline): Certified Ethical Hacker (CEH) certification.

Desired Qualifications

• In-depth knowledge of advanced vulnerability assessment methodologies, remediation workflows, and industry best practices.
• Self-starter mindset with the ability to own technical tasks independently from scoping through remediation verification.
• Strong analytical, troubleshooting, and problem-solving skills with meticulous attention to detail.