Vulnerability Management Engineer; Tenable​/Nessus, Linux

Cyber Security Engineer III | Vulnerability Management (Tenable / Nessus, Linux)

Location: Springfield, VA (100% onsite)

Time Type: Full Time

Clearance Required to Start: Active TS/SCI (U.S. citizenship required)

Additional Requirement: Government polygraph, post-hire

Travel: Up to 10%, local

Salary Range: $117,000 - $128,000 per year

RISA is hiring a senior Endpoint Security Engineer to install, run, and tune the Tenable Suite (Security Center, Nessus Scanners, and Nessus Managers) on Linux across a large, global network supporting an Intelligence Community customer. This is a hands-on administrator role on a long-term program, working alongside a talented engineering team. You will talk to the owner here, not a recruiting queue.

• Install, configure, and maintain Tenable Security Center, Nessus Scanners, and Nessus Managers on Linux platforms.
• Run regular vulnerability scans and assessments across the enterprise network.
• Analyze scan results and prioritize vulnerabilities by severity and impact.
• Work with IT and security teams to remediate findings.
• Produce and distribute vulnerability reports to stakeholders and senior management.
• Monitor security alerts and respond to incidents promptly.
• Train and support users on the Tenable products.
• Keep the Tenable environment performing well and secure, and install and configure other security products on Linux.
• Stay current on emerging threats and vulnerabilities.

• Active TS/SCI clearance, and the ability to pass and maintain a Government polygraph after hire.
• Current DoD 8570/8140 IAT Level II certification (e.g., Security+ CE or higher).
• Ability to obtain a CSSP Infrastructure Support certification within six months of hire.
• Education and experience:
  
  Bachelor's degree in Engineering, Computer Science, or a related field plus ten years of technical cybersecurity experience. Additional experience may be considered in lieu of a degree.
• Hands-on administrator experience with the Tenable Suite:
  Security Center, Nessus Scanners, and Nessus Manager.
• Strong Linux skills: installation, configuration, maintenance, and hardening.
• Experience on large-scale enterprise or global networks in a fast-paced environment.
• Understanding of the DoD Architecture Framework and DoD network architecture and strategic planning guidance.
• Experience planning, designing, and evaluating security systems and architectures.
• Experience delivering status reports and products to senior management and customers.

• CSSP Infrastructure Support certification.
• Linux certifications (RHCSA, RHCE, Linux+, or similar).
• Scripting for automation (Python, Bash, Power Shell).
• Experience hardening Linux to DISA STIGs.

Rolston Information Systems Assurance (RISA) is a Service-Disabled Veteran-Owned Small Business that has supported federal defense and intelligence cybersecurity missions for more than seventeen years. We are small on purpose: direct access to leadership, a real say in how the work gets done, and none of the layers that slow large primes down.

Medical, dental, and vision insurance; 401(k) and Roth;
Paid Time Off; and 11 paid Federal Holidays.

RISA is an Equal Opportunity Employer.

Upon receiving an offer of employment, all applicants will be required to do a background check, including a criminal record check and employment/education verification.