Vulnerability Scanning Administrator (Cybersecurity Technical Staff 2

What You Will Do

The work we do at Los Alamos National Laboratory (LANL) has a meaningful impact on our country and the world. The Innovative Customer Experience (ICE) Division is seeking a skilled Vulnerability Scanning Specialist to help manage and optimize scanning across a large, diverse network. In this role, you will troubleshoot network and agent based scanning issues, implement enhancements to improve our scanning and analysis capabilities, and collaborate closely with team members to maintain a scalable and secure infrastructure.

You will also provide technical guidance to the team, CSIRT, and NSOC. Responsibilities include performing enterprise wide vulnerability scans using tools like Nessus and Tenable Security Center, ensuring full coverage across multiple platforms and architectures, and delivering Tier 3 support for complex scanning issues.

The work we do at Los Alamos National Laboratory (LANL) has a meaningful impact on our country and the world. The Innovative Customer Experience (ICE) Division is seeking a skilled Vulnerability Scanning Specialist to help manage and optimize scanning across a large, diverse network. In this role, you will troubleshoot network and agent based scanning issues, implement enhancements to improve our scanning and analysis capabilities, and collaborate closely with team members to maintain a scalable and secure infrastructure.

You will also provide technical guidance to the team, CSIRT, and NSOC. Responsibilities include performing enterprise wide vulnerability scans using tools like Nessus and Tenable Security Center, ensuring full coverage across multiple platforms and architectures, and delivering Tier 3 support for complex scanning issues. The ICE division consists of more than 350 talented Cybersecurity Technical Staff, Solution Architects, and Computer Systems Professionals employees who provide the varied Laboratory organizations with Information Technology experts who design, build, and support their mission-driven technical needs, on the unclassified and classified networks through several different service touchpoints.

In addition, optimize the use of information technology, ensure seamless delivery and operation of IT services by monitoring system performance, applying configuration management practices, creating processes and standards for selection and implementation. The successful candidate will be supporting scanning using a Tenable based application, an in-house developed enterprise solution that tracks and documents systems on the network no matter how they are connected, performs vulnerability scans on the systems if possible, and blocks hosts from the network based on a complex set of compliance and vulnerability checks.

This system is extremely complex with many other enterprise service interdependencies. The successful candidate will be self-driven, analytical, creative, and patient. They will enjoy working with others, whether their own team, customers, or subject matter experts from other organizations.

• Diagnose and resolve issues with network vulnerability scanning tools, with primary focus on Tenable applications
• Partner with network operators and engineers to identify and resolve host discovery tool challenges
• Collaborate with development teams to conduct release testing, debug issues, and enhance the Tenable based application
• Integrate Tenable based system with external services and data sources through cross-functional team collaboration
• Support vulnerability analysts in investigating false positives and conducting risk assessments
• Facilitate network audits for security compliance teams
• Provide incident response support for host quarantine solutions and scanning-related inquiries
• Deliver technical assistance and guidance to system owners and administrators
• Develop and maintain comprehensive application documentation for end users and technical staff
• Research, evaluate, and recommend new vulnerability scanning and host discovery solutions
• Design and maintain monitoring systems for automated data ingestion and processing workflows

• Experience maintaining, optimizing, and troubleshooting any industry vulnerability scanning/management tool.
• Experience with enterprise level vulnerability management, including configuring scanning, reviewing scan results, reviewing vulnerabilities, troubleshooting false positives/negatives when requested by system admins, and proposing remediation strategies when patching is not available for remediation.
• Excellent problem-solving skills and the ability to work in a fast-paced environment.
• Strong communication skills and the ability to collaborate effectively with team members.
• Strong documentation skills.

Education/

Experience:

Position requires a Bachelor's degree in a technical field and a minimum of 5 years' related experience, or an equivalent combination of education and experience. At this level post graduate work may be expected.

• Experience…