Vulnerability Management Engineer (Tenable/Nessus, Linux)

RISA; Springfield (VA); On-site; USD 117,000 - 128,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) and Roth; Paid Time Off

11 federal holidays

Job summary

RISA is seeking a senior Endpoint Security Engineer to own the Tenable stack across a large, global network supporting an Intelligence Community customer. This hands-on role installs, tunes, and maintains the Tenable Suite on Linux on a long-term program.

You will collaborate with an engineering team, communicate with stakeholders, and stay ahead of emerging threats while ensuring secure operations and compliance.

Qualifications

• Bachelor's degree in Engineering, Computer Science, or related field plus ten years of technical cybersecurity experience.
• Active TS/SCI clearance (U.S. citizenship required).
• Hands-on administrator experience with the Tenable Suite: Security Center, Nessus Scanners, Nessus Manager.

Responsibilities

• Install, configure, and maintain Tenable Security Center, Nessus Scanners, and Nessus Managers on Linux.
• Run regular vulnerability scans and assessments across the enterprise network.
• Analyze scan results and prioritize vulnerabilities by severity and impact.
• Work with IT and security teams to remediate findings.
• Produce and distribute vulnerability reports to stakeholders and senior management.
• Monitor security alerts and respond to incidents promptly.
• Train and support users on the Tenable products.
• Install and configure other security products on Linux and stay current on threats.

Skills

Tenable Suite

Linux

Vulnerability assessment

Security Center

Nessus Scanners

Nessus Manager

Education

Bachelor's degree

Tools

Security Center

Nessus Scanners

Nessus Manager

Job description

Endpoint Security Engineer III

Cyber Security Engineer III | Vulnerability Management (Tenable / Nessus, Linux)

Location: Springfield, VA (100% onsite)

Time Type: Full Time

Clearance Required to Start: Active TS/SCI (U.S. citizenship required)

Additional Requirement: Government polygraph, post-hire

Travel: Up to 10%, local

Salary Range: $117,000 - $128,000 per year

Own the Tenable stack for an Intelligence Community enterprise, from the Linux box up.

RISA is hiring a senior Endpoint Security Engineer to install, run, and tune the Tenable Suite (Security Center, Nessus Scanners, and Nessus Managers) on Linux across a large, global network supporting an Intelligence Community customer. This is a hands-on administrator role on a long-term program, working alongside a talented engineering team. You will talk to the owner here, not a recruiting queue.

What You Will Do

• Install, configure, and maintain Tenable Security Center, Nessus Scanners, and Nessus Managers on Linux platforms.
• Run regular vulnerability scans and assessments across the enterprise network.
• Analyze scan results and prioritize vulnerabilities by severity and impact.
• Work with IT and security teams to remediate findings.
• Produce and distribute vulnerability reports to stakeholders and senior management.
• Monitor security alerts and respond to incidents promptly.
• Train and support users on the Tenable products.
• Keep the Tenable environment performing well and secure, and install and configure other security products on Linux.
• Stay current on emerging threats and vulnerabilities.

What You'll Bring

• Active TS/SCI clearance, and the ability to pass and maintain a Government polygraph after hire.
• Current DoD 8570/8140 IAT Level II certification (e.g., Security+ CE or higher).
• Ability to obtain a CSSP Infrastructure Support certification within six months of hire.
• Education and experience: Bachelor's degree in Engineering, Computer Science, or a related field plus ten years of technical cybersecurity experience. Additional experience may be considered in lieu of a degree.
• Hands-on administrator experience with the Tenable Suite: Security Center, Nessus Scanners, and Nessus Manager.
• Strong Linux skills: installation, configuration, maintenance, and hardening.
• Experience on large-scale enterprise or global networks in a fast-paced environment.
• Understanding of the DoD Architecture Framework and DoD network architecture and strategic planning guidance.
• Experience planning, designing, and evaluating security systems and architectures.
• Experience delivering status reports and products to senior management and customers.

Nice to Have

• CSSP Infrastructure Support certification.
• Linux certifications (RHCSA, RHCE, Linux+, or similar).
• Scripting for automation (Python, Bash, PowerShell).
• Experience hardening Linux to DISA STIGs.

About RISA

Rolston Information Systems Assurance (RISA) is a Service-Disabled Veteran-Owned Small Business that has supported federal defense and intelligence cybersecurity missions for more than seventeen years. We are small on purpose: direct access to leadership, a real say in how the work gets done, and none of the layers that slow large primes down.

Benefits

Medical, dental, and vision insurance; 401(k) and Roth; Paid Time Off; and 11 paid Federal Holidays.

RISA is an Equal Opportunity Employer.

Upon receiving an offer of employment, all applicants will be required to do a background check, including a criminal record check and employment/education verification.