Vulnerability Scan Engineer

Responsibilities

• Take ownership of multi-console vulnerability management, scanner health monitoring, and scan policy configuration.
• Design and execute complex scan schedules, including discovery, credentialed vulnerability assessments, and web application scans (WAS).
• Utilize the Tenable API to push data into central ticketing systems or SIEMs to streamline the remediation workflow and automate manual tasks.
• Conduct console checkups to identify stuck scans, scanner connectivity issues, or credential failures across On-prem, Cloud, and Hybrid architectures.
• Troubleshoot broken Nessus agents and network-related scan gaps (NAT/Firewalls), coordinating directly with client IT contacts for remediation.
• Manage incoming vulnerability-related support tickets, providing rapid response and clear technical communication to both internal teams and non-technical stakeholders.

• 3+ years of hands-on experience with Tenable.io, Tenable.sc, and Nessus Agents.
• Strong understanding of NAT, PAT, Firewalls, and Load Balancers and how they impact scan accuracy and scanner placement.
• Deep knowledge of Windows Registry, Linux config files, and the ability to explain why credentialed scanning is necessary to IT Managers.
• A strong ability to analyze scan logs and results to identify root causes of failures and distinguish between legitimate vulnerabilities and false positives.
• Excellent technical communication skills with a "customer-first" mindset and the ability to act as a partner to a client's IT team.