Vulnerability Management Engineer (Tenable)

Alluvial Concepts; Rockville (MD); On-site; USD 120,000 - 180,000; Full time

Job summary

Alluvial Concepts is seeking a cybersecurity professional to lead vulnerability management across enterprise and cloud environments, focusing on Tenable-based scanning, results analysis, and remediation coordination. The role emphasizes developing executive dashboards and security reporting to inform leadership.

The ideal candidate has 10+ years of cybersecurity experience, with hands-on Tenable, Splunk dashboards, and Defender administration, plus federal sector familiarity.

Qualifications

• Bachelor’s degree required with 10+ years of professional cybersecurity experience.
• Certification required: CISSP, GCED, GCIH, CND, or SSCP.
• Hands-on Tenable vulnerability management experience.
• Hands-on Splunk dashboards, reports, and visualizations experience.
• Hands-on Microsoft Defender endpoint protection and monitoring experience.

Responsibilities

• Administer and optimize Tenable vulnerability management solutions.
• Design, schedule, execute, and maintain enterprise vulnerability scans.
• Analyze scan results and prioritize vulnerabilities by risk and impact.
• Develop and maintain Splunk dashboards and reporting for visibility into trends and remediation progress.
• Partner with infrastructure, cloud, and application teams to track remediation activities.

Skills

Vulnerability management

Risk assessment

Federal environment experience

Threat analysis

Incident response

Education

Bachelor’s degree

Tools

Tenable

Splunk

Microsoft Defender

Nessus

BigFix

Job description

Seeking a cybersecurity professional with strong experience leading vulnerability management activities across enterprise and cloud environments. This role will focus heavily on administering and optimizing Tenable-based vulnerability scanning programs, analyzing scan results, developing executive dashboards and reporting, and partnering with technical teams to drive remediation efforts. Experience supporting federal agencies is highly preferred.

Key Responsibilities

• Administer and optimize Tenable vulnerability management solutions.
• Design, schedule, execute, and maintain enterprise vulnerability scans.
• Analyze scan results and prioritize vulnerabilities based on risk and business impact.
• Develop and maintain Splunk dashboards and reporting to provide visibility into vulnerability trends, remediation progress, and overall security posture.
• Support Microsoft Defender administration and monitoring efforts, including endpoint protection, threat detection, and remediation activities.
• Develop dashboards, metrics, and executive reporting within Tenable.
• Partner with infrastructure, cloud, and application teams to track vulnerability remediation activities.
• Support vulnerability management efforts across Azure and AWS cloud environments.
• Assist with Data Loss Prevention (DLP) and endpoint security initiatives.
• Validate remediation activities and maintain vulnerability tracking processes.
• Support compliance requirements within federal cybersecurity environments.
• Provide risk reporting and technical recommendations to security leadership and stakeholders.
• Support vulnerability remediation resulting from security assessments and penetration testing activities.
• Contribute to cybersecurity operations initiatives involving endpoint protection and enterprise security tooling.

Required Education + Experience

• Bachelor’s degree with 10+ years of professional experience.
• Certification - must have one of the following CISSP, GCED, GCIH, CND, SSCP
• 4+ years of cybersecurity experience with at least 2 years in a federal environment.
• Hands-on experience with Tenable vulnerability management solutions.
• Hands-on experience with Splunk, including developing dashboards, reports, and visualizations to support vulnerability management and security operations.
• Hands-on experience with Microsoft Defender, including endpoint protection, threat detection, security monitoring, and remediation activities.
• Strong understanding of vulnerability assessment methodologies and remediation processes.
• Hands-on experience identifying, analyzing, and tracking vulnerabilities across Azure and/or AWS environments.
• Proven ability to consistently understand threats, evaluate the impact of potential incidents, and recommend risk reduction techniques based on a knowledge of different operation threat environments, general attack stages, incident categories, cyber defense tool data collection, and playbooks for resolving common incidents.
• Knowledge of and experience overseeing the administration and configuration of workstation and infrastructure security tools including but not limited to: Anti-malware/Anti-virus software, Data Loss Prevention (DLP) software, endpoint detection and response (EDR), vulnerability assessment tools, asset discovery and management software, SIEM, Cloud Access Security Broker (CASB).

Preferred Experience

• Experience with Nessus and related vulnerability assessment tools to identify, analyze, and prioritize security vulnerabilities.
• Experience with BigFix to support remediation activities, endpoint management, and vulnerability mitigation efforts.
• Knowledge of OT/ICS/SCADA environments.
• Experience supporting enterprise penetration test remediation programs.
• Knowledge of NIST, RMF, FISMA, or FedRAMP requirements.

#DICE