Vulnerability Assessment Analyst - Information Systems Security Engineer

Job Title:

Vulnerability Assessment Analyst - Information Systems Security Engineer Job Category:
Information Technology Time Type:
Part time Minimum Clearance Required to Start: TS/SCI with Polygraph Employee Type:
Part-Time On-Call Percentage of

Travel Required:

Up to 10%
Type of Travel:
None*
*
* The Opportunity:

CACI is seeking a highly skilled Systems Security Engineer to work on-site in Annapolis Junction, MD , supporting enterprise vulnerability management and cybersecurity operations. The ideal candidate will have hands-on experience with Tenable Security Center and Nessus , Linux and Windows environments, vulnerability assessments, STIG remediation, and continuous security monitoring. This role requires a strong understanding of system and application vulnerabilities, excellent analytical skills, and the ability to work independently while collaborating effectively with ISS and other technical teams.

Responsibilities:

Maintain, optimize, and administer the Tenable Security Center infrastructure and associated scanning environments.

Conduct security patching, vulnerability assessments, and Nessus scans across Linux Security Center servers and Windows/Linux scanning servers.

Install, configure, maintain, and update Tenable Nessus and Tenable Security Center software.

Configure and fine-tune scanning policies, asset lists, and security configurations to provide comprehensive vulnerability coverage.

Perform vulnerability assessments across multiple device types and operating systems using Tenable Security Center.

Conduct continuous monitoring of customer assets using Nessus to identify and evaluate security vulnerabilities.

Review and analyze Nessus/ACAS scan results , including successful, unsuccessful, and potential scan results.

Identify and support remediation of DISA STIGs and system vulnerabilities across Tenable servers and scanning infrastructure.

Analyze vulnerability data and prepare clear, comprehensive reports for management and technical stakeholders.

Monitor and track vulnerability remediation activities to support timely resolution.

Collaborate with ISS and other technical teams to address vulnerabilities and strengthen the customer's security posture.

Communicate security risks, assessment findings, and remediation status to stakeholders.

Maintain accurate records of vulnerabilities, security activities, and related findings.

Qualifications:

Required:

Bachelor's degree with 7 years of experience .DoD 8570 IAT Level II certification requirements.

CEH or CompTIA Security+ CE certification.

Hands-on experience with enterprise vulnerability management and scanning solutions, particularly Tenable/Nessus .Familiarity with DISA STIGs, Tenable Audit Files, and/or CIS Benchmarks .Knowledge of system and application security threats, vulnerabilities, and remediation practices.

Working knowledge of Linux/Unix and Windows administration .

Experience with patch deployment and system configuration.

Understanding of networking and enterprise IT environments.

Strong analytical, troubleshooting, and problem-solving skills with exceptional attention to detail.

Desired:

In-depth knowledge of vulnerability assessment methodologies, tools, and industry best practices.

Experience managing vulnerability remediation across complex enterprise environments.

Ability to independently manage assignments and take ownership of tasks from initiation through completion.

Demonstrated ability to collaborate effectively with ISS, engineering, and other technical teams.

Strong communication skills with the ability to clearly present technical findings and security risks to management and stakeholders.

-What You Can Expect: A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a…