Tenable Engineer Jobs

Tenable Engineer

This position requires an active DoD Clearance (Secret, Top Secret, Top Secret/SCI) Because an active DoD clearance is required, U.S. Citizenship is required Tenable Engineer

Location:

Oklahoma City, OK;
Ogden, UT;
Mechanicsburg, PA;
Montgomery, AL (Preferred) Duration: 12-Month Contract Travel:
Up to 25% Security Clearance:
Active Secret Clearance Required Citizenship Requirement: U.S. Citizenship Required Important:
The customer reserves the right to extend a full-time employment offer after 90 days. Candidates submitted should be open to potential direct hire conversion.

We are seeking an experienced Tenable Engineer to support enterprise vulnerability management, compliance assessment, and cybersecurity operations within a secure government environment. The ideal candidate will possess deep expertise with Tenable Security Center (Tenable.sc) and Nessus, along with a strong understanding of vulnerability management, STIG compliance, and remediation processes across Windows and Linux environments. This position requires a proactive security professional who can collaborate across infrastructure, cloud, engineering, and security teams to identify, validate, prioritize, and remediate vulnerabilities while maintaining compliance with federal cybersecurity requirements.

• Tenable Administration & Vulnerability Management
• Serve as the subject matter expert (SME) for Tenable.sc (Security Center) and Nessus administration.
• Configure and maintain scan policies, scan zones, repositories, credentials, dashboards, schedules, and reporting capabilities.
• Develop and optimize vulnerability scanning strategies across enterprise environments.
• Manage and tune authenticated and unauthenticated scanning activities to improve coverage and accuracy.
• Troubleshoot scanning issues, credential failures, and asset discovery challenges.
• Vulnerability Assessment & Compliance
• Perform and manage:
  Credentialed vulnerability scans Discovery scans Port scans Configuration compliance scans STIG compliance assessments
• Analyze scan results and provide actionable remediation guidance to stakeholders.
• Validate remediation efforts through rescanning and verification activities.
• Monitor vulnerability trends and identify high-risk exposures requiring immediate attention.
• Security Compliance & Hardening
• Apply expertise in:
  Security Technical Implementation Guides (STIGs) Assured Compliance Assessment Solution (ACAS) Checklist (CKL) management DoD cybersecurity compliance requirements
• Assist system owners and administrators with system hardening efforts.
• Support audit readiness initiatives and security compliance reporting.
• Ensure vulnerability management processes align with organizational and regulatory requirements.
• False Positive Analysis & Validation
• Conduct detailed analysis of vulnerability findings to identify and validate false positives.
• Review scan evidence and system configurations to determine vulnerability applicability.
• Document findings and coordinate with remediation teams to ensure accurate risk reporting.
• Recommend scan tuning and optimization improvements to reduce recurring false positives.
• Cross-Functional Collaboration
• Partner with Cloud, Network, Platform, Security, and Engineering teams to drive remediation efforts.
• Provide technical guidance on vulnerability mitigation strategies and compensating controls.
• Participate in security reviews, risk assessments, and remediation planning sessions.
• Communicate technical findings to both technical and non-technical stakeholders.

• Active Secret Security Clearance
• U.S. Citizenship
• 5+ years of cybersecurity, vulnerability management, or security engineering experience
• 3+ years of hands-on experience administering Tenable.sc and Nessus
• Experience conducting credentialed vulnerability assessments in large enterprise environments
• Strong knowledge of:
  Vulnerability management lifecycle ACAS/Tenable findings analysis STIG implementation and compliance validation Risk-based remediation methodologies
• Strong Windows Server administration experience
• Strong Linux administration experience
• Experience managing authenticated scanning credentials and troubleshooting scan failures
• Excellent analytical, documentation, and communication skills

• Experience supporting Department of Defense (DoD) or Federal Government environments
• Familiarity with RMF, NIST 800-53, and DoD cybersecurity frameworks
• Experience with vulnerability remediation tracking and reporting tools
• Knowledge of cloud security platforms and hybrid infrastructure environments
• Security certifications such as:
  Security+ CySA+ CASP+ CISSP Tenable Certified Professional (TCP)

• Tenable.sc (Security Center)
• Nessus
• ACAS
• STIG Viewer / CKLs
• Windows Administration
• Linux Administration
• Vulnerability Assessment & Management
• Compliance Scanning
• Security Hardening
• False Positive Validation
• Risk Analysis & Remediation

The ideal candidate is a highly technical…