Nessus

Nessus Engineer Jobs

12 jobs found

8d ago

Senior Cyber Security Engineer

CACI Chantilly, VA

Chantilly, VA

8d ago

$104k - $218k/yr Full time Senior Cloud Platforms Cybersecurity Operations

Apply Now

Job Description

Senior Cyber Security Engineer role supporting mission-critical enterprise cybersecurity applications and systems in Chantilly, VA (onsite).

Responsibilities

Provide engineering support and system administration for cybersecurity applications, including installation, configuration, maintenance, patching, and backup/restore.
Develop, customize, and manage scan policies, audit files, scan jobs, dashboards, and reports, including related content for Tenable Nessus and ServiceNow integrations.
Deliver Tier 2 and Tier 3 support for cybersecurity technologies while ensuring alignment with customer policies, procedures, and TASKORDs.
Troubleshoot vulnerability scanning problems and provide timely support via phone, email, and messaging platforms.
Identify and implement process automation; integrate scripted solutions to streamline recurring tasks and metrics collection.
Support Assessment & Authorization (A&A) activities by updating documentation, preparing security artifacts, and resolving technical conflicts.
Review policies, customer feedback, and operational workflows to recommend improvements that enhance efficiency and cybersecurity posture.

Requirements

Active TS/SCI clearance with polygraph.
Bachelor’s degree or 4+ years of additional relevant experience.
5+ years of experience working with cybersecurity tools in an enterprise environment.
Hands-on experience with Tenable products and enterprise vulnerability scanning operations.
Strong knowledge of Windows and Linux administration, operating system hardening, TCP/IP networking, and core network security concepts.
Demonstrated expertise in enterprise scanning, continuous monitoring, host/network defense, and intrusion detection.
Ability to translate cybersecurity needs into technical requirements and apply architectural principles such as defense-in-depth and resilience.
Excellent skills in communication, organization, troubleshooting, and customer support.
Active IAT Level II certification, or ability to obtain within 30 days of hire.

Technologies

Tenable Nessus
ServiceNow
AWS services
Windows
Linux
NIST SP 800-37 (RMF)
NIST SP 800-137 (Continuous Monitoring)

Travel Requirements

Up to 10% travel
Type: Local

Desired

Experience with AWS services and ServiceNow.
Familiarity with federal cybersecurity frameworks including NIST SP 800-37 (RMF) and NIST SP 800-137 (Continuous Monitoring).
Experience developing automation and scripting to support workflow optimization.
Ability to operate effectively in a fast-paced environment while managing multiple priorities.
Strong collaboration skills, with ability to work independently or as part of a team.

Contingent on Funding

This position is contingent on funding and may not be filled immediately.
It represents positions within CACI that are consistently available.
Applicants may also be considered for other positions at CACI.

Pay Range

USD 103,800 - 218,100 per yearly

View full job page →

13d ago

Cybersecurity Engineer

Caribou Thunder Colorado Springs, CO

Colorado Springs, CO

13d ago

$100k - $117k/yr Full time Cybersecurity Tools Information Security InfoSec

Apply Now

Job Description

Support cybersecurity engineering and Risk Management Framework (RMF) activities for mission-critical defense systems in Colorado Springs, CO.

Responsibilities

Assess systems and networks for deviations from approved configurations, enclave policies, security baselines, and local security requirements.
Conduct security compliance evaluations using tools such as STIG Viewer, SCAP, Evaluate-STIG, STIG Manager, and other applicable technologies.
Author, update, and review security testing documentation, including security assessment plans, test cases, and cybersecurity test methodologies.
Perform annual security control assessments and support continuous monitoring to verify control effectiveness.
Provide technical input for Security Assessment Reports (SARs), Risk Assessment Reports (RARs), and other cybersecurity assessment deliverables.
Coordinate with the program’s System Program Office (SPO) contractor and Government personnel to keep system records current in eMASS.
Collect, prepare, organize, and maintain RMF evidence, including operational process documentation, procedures, and site-specific security requirements.
Prepare and update RMF artifacts that support Assessment and Authorization (A&A), including POA&Ms.
Review RMF documentation and security artifacts to identify gaps, inconsistencies, and deviations from applicable security control requirements.
Support implementation of Government cybersecurity policies and standards, including NISPOM, NIST, DoD, and Air Force instructions as applicable.
Help establish and maintain program control processes that support risk mitigation, security compliance, and system authorization.
Support control certification testing, compliance documentation, technical investigations, software research, hardware introduction and release activities, emerging technology research, inspections, and periodic audits.
Analyze cybersecurity controls and requirements to validate effectiveness and recommend safeguards.
Coordinate with program stakeholders to investigate and resolve deficiencies identified during RMF assessments.
Support vulnerability management, system hardening, and remediation to improve security posture.
Collaborate with cybersecurity engineers, system administrators, software teams, and Government representatives to maintain security compliance.
Maintain clear technical documentation and communicate assessment results, risks, and corrective actions to stakeholders.
Level 3 engineers: take on greater responsibility for complex assessments, RMF artifact reviews, deficiency resolution, and coordination of cybersecurity activities across the program.

Requirements

Bachelor’s + 5 years relevant work experience; OR Master’s + 3 years; OR PhD + 1 year.
Active U.S. Government Secret security clearance, current and within scope, at time of application.
Current DoD 8570.01M IAT Level II certification (examples: Security+ CE, CCNA Security, GSEC, SSCP).
Experience in cybersecurity or security engineering, including principles, risk management, security assessments, vulnerability management, and/or system hardening.
Experience with cybersecurity frameworks, standards, tools, or technologies used to assess and secure information systems.
Ability to evaluate security requirements, identify compliance deficiencies, and support corrective action development.
Ability to prepare and maintain technical documentation and communicate findings to engineering teams and stakeholders.

Technologies

STIG Viewer, SCAP, Evaluate-STIG, STIG Manager, STIGs, SCAP Compliance Checker (SCC), ACAS, Nessus, Tenable.sc
SIEM, Ansible, Python, Jira, Atlassian tools, VMware, Elastic Stack
eMASS, DoDI 8500.01, NIST SP 800-53, NIST SP 800-115, NISPOM, NIST, DoD, Air Force instructions
DoD 8570.01M, Security+ CE, CCNA Security, GSEC, SSCP, OSCP, OSCE, GPEN, OSCP, OSCE, GPEN, GWAPT, GXPN, CISSP, Xylok
Red Hat Enterprise Linux (RHEL), Ansible or Python

Benefits

Premium Health, Dental & Vision Insurance
401(k) with 6% Company Match
Flexible PTO & Work Schedule
Education & Certification Reimbursement
Support for Military Leave
Work–Life Balance & Traditional Family Values

Preferred Qualifications

Working knowledge of cybersecurity technologies and DoD/Federal policy, including DoDI 8500.01, NIST SP 800-53, and NIST SP 800-115.
Familiarity with RMF lifecycle, including development of testable security controls and assessment procedures.
Experience conducting vulnerability and compliance scans using ACAS, Nessus, or Tenable.sc.
Linux system administration experience.
Experience implementing STIGs and hardening system configurations.
STEM degree and experience options: Bachelor’s with 8 years; Master’s with 7 years; PhD with 4 years; relevant experience may be considered in lieu of degree.
Penetration testing certifications: OSCP, OSCE, GPEN, GWAPT, or GXPN.
Experience using/configuring SIEM and log aggregation software.
Experience conducting cybersecurity assessments of RHEL environments.
Networking concepts: subnetting, firewalls, NAT, ACLs, VLANs.
Familiarity with STIG/SCAP compliance scanning using SCC, Evaluate-STIG, STIG Manager, and Xylok.
Experience automating security scanning and compliance activities using Ansible or Python.
Familiarity with Agile methodologies (Scrum, Kanban, or SAFe).
Experience with Jira and other Atlassian tools.
VMware and containerization experience.
Experience with eMASS and ATO processes.
Experience with Elastic Stack.
Cross-Domain Solution (CDS) experience, including authorization activities and coordination with CDSE and NCDSMO.
DoD IAT Level III certification such as CISSP.
Ability and willingness to travel CONUS and OCONUS up to 25%.

Travel Requirements

Ability and willingness to travel CONUS and OCONUS up to 25%.

Location: Colorado Springs, CO (onsite)

Salary: USD 100,000 - 117,000 per yearly

View full job page →

17d ago

Cyber Security Engineer III

Scientific Research Corporation San Diego, CA

San Diego, CA

17d ago

$111k - $185k/yr Full time Cyber Security Engineer Cybersecurity Tools Information Security

Apply Now

Job Description

Scientific Research Corporation (SRC) is seeking a Cyber Security Engineer III to support a Naval Information Warfare Center (NIWC) Pacific program in San Diego, CA. This onsite role focuses on information system security engineering and on integrating security requirements into IT components used in LVC training and simulation environments.

Role Summary

In this position, you will perform information system security engineering work, including identifying and refining information security requirements and ensuring those requirements are carried through purposeful design and configuration. Your efforts will help security needs translate into practical implementation across system components supporting the program’s training and simulation mission.

Responsibilities

Conduct information system security engineering activities, including capturing and refining information security requirements.
Ensure information security requirements integrate into information technology components through purposeful design and configuration.

Required Qualifications

Bachelor's degree in computer science, computer engineering, SW engineering, or cybersecurity.
Eight (8) plus years of cybersecurity experience.
IA Level I or higher certification, such as: A+CE, CCNA-Security, CND, Network+CE, or SSCOP.
NIA or NSA RMF cybersecurity experience.

Technologies

Tenable Security Center
Nessus
SCAP compliance checker
A+CE
CCNA-Security
CND
Network+CE
SSCOP

Desired Skills

Four (4) plus years of experience with Tenable Security Center and Nessus.
Four (4) plus years of experience with SCAP compliance checker.
Experience participating in system design reviews during the development lifecycle to incorporate and implement security control considerations in both hardware and software development.

Compensation

USD 111,100 - 185,100 per year.

Benefits

Medical, dental, and vision plans
401(k) with a company match
Life insurance
Vacation and sick paid time off accruals, with amounts increasing based on role and years of service
11 paid holidays
Tuition reimbursement
Work environment that encourages excellence

Clearance Information

U.S. citizenship required
U.S. Government security clearance at the Top Secret / SCI level required

Travel Requirements

20% travel to perform security assessments

Education: Bachelor's degree in computer science, computer engineering, SW engineering, or cybersecurity.

View full job page →

19d ago

Senior Cybersecurity Engineer

Odyssey Systems Consulting Group, Ltd. Hanscom AFB, MA

Hanscom AFB, MA

19d ago

$175k - $185k/yr Full time Senior Cybersecurity Cybersecurity Tools

Apply Now

Job Description

Senior cybersecurity role supporting Air Force Life Cycle Management Center Ground Base Air Defense Sensor division (AFLCMC/ESG) at Hanscom AFB, Bedford, MA (onsite).

Responsibilities

Support installation, configuration, and maintenance of ACAS components, including Nessus scanners, SecurityCenter/Tenable.sc, and Nessus Network Monitor (NNM)/Tenable.asm
Schedule and execute vulnerability scans using Nessus scanners
Review scan results to identify vulnerabilities and misconfigurations
Perform DISA STIG-based configuration hardening across multi-classification networks
Assist with compliance assessments against DoW standards and internal security policies
Produce reports covering vulnerability status, compliance posture, and remediation progress
Coordinate with system administrators to support vulnerability remediation activities
Assist with system administration tasks for ACAS servers and databases
Manage cybersecurity incident reporting and perform root-cause analysis
Develop corrective action plans and maintain POA&Ms
Track evolving vulnerability trends and security threats to support ongoing risk management

Requirements

US citizenship
Ability to obtain and maintain an Active Secret clearance
CISSP certification
Bachelor’s degree in a professional engineering discipline from an ABET-accredited program
At least 10-15 years of experience in the respective technical/professional discipline, with 10 years in the DoD
Understanding of cybersecurity in DoD cloud infrastructure
Knowledge of Agile methodologies, including CI/CD, DevSecOps, and DevOps
Experience with systems analysis and eMASS
Strong written and verbal communication skills for technical topics

Technologies

ACAS
Nessus
SecurityCenter/Tenable.sc
Nessus Network Monitor (NNM)/Tenable.asm
DISA STIG
Nessus scanners
Risk Management Framework (RMF)
eMASS
Agile methodologies
CI/CD
DevSecOps
DevOps
PKI

Compensation

USD 175,000 - 185,000 per year

Location

Hanscom AFB, MA (onsite)

Benefits

Medical, dental, and vision
Life insurance
Tricare supplement
Short-term disability
Long-term disability
401(k) match
Flexible spending accounts
Health savings accounts
Employee assistance program
Learning and development benefit
Paid time off
Holidays

View full job page →

21d ago

Senior Oracle Database / Cloud & Security Engineer

Agile Business Concepts, LLC Reston, VA

Reston, VA

21d ago

Full time Senior Ato Support Cloud

Apply Now

Job Description

Agile Business Concepts, LLC is seeking a Senior Oracle Database / Cloud & Security Engineer to support a Federal Government mission-critical application environment in Reston, VA (onsite). The position combines hands-on Oracle database administration with cloud infrastructure support, cybersecurity and vulnerability remediation, and support for ATO, backup/recovery, and disaster recovery activities.

Responsibilities

Provide hands-on Oracle database administration for mission-critical systems
Provide cloud infrastructure support for enterprise environments
Provide cybersecurity support and security-focused remediation
Perform vulnerability remediation to address identified findings
Provide ATO support as part of compliance and operational readiness activities
Support backup and recovery activities
Support disaster recovery planning and execution support
Provide database and application infrastructure support

Required Qualifications

U.S. Citizenship is required
Minimum 8 years of database, infrastructure, cloud, or systems engineering experience
Minimum 5 years of hands-on Oracle Database administration experience
Strong experience with Oracle Database 19c Enterprise Edition
Strong hands-on experience with SQL, SQL*Plus, PL/SQL, database performance tuning, monitoring, and security
Experience with Oracle RMAN, Data Pump, and Oracle Enterprise Manager (OEM)
Experience with database installation, configuration, upgrades, patching, backup, recovery, and maintenance
Experience with AWS or other enterprise cloud environments
Experience with cloud/database migration and application modernization
Experience identifying and remediating cybersecurity vulnerabilities
Experience with POA&M, security assessments, ATO documentation, system hardening, and vulnerability remediation
Experience supporting disaster recovery, backup, archiving, and restoration

Technologies

Oracle Database 19c Enterprise Edition
SQL, SQL*Plus, PL/SQL
Oracle RMAN, Data Pump
Oracle Enterprise Manager (OEM)
AWS
NIST, RMF, FISMA, STIGs
Nessus
DevSecOps

View full job page →

1mo ago

Cybersecurity Engineer

Zaden Technologies, Inc. Huntsville, AL

Huntsville, AL

1mo ago Closed

Full time Authorization Incident Response Information Security

This position is no longer accepting applications (closed Oct 25, 2026).

Job Description

Zaden Technologies, Inc. is seeking a Cybersecurity Engineer with an ISSO background to support RMF authorization activities and strengthen system security posture. The position also partners closely with DevSecOps to embed security into CI/CD workflows and streamline compliance evidence collection.

Responsibilities

Perform ISSO duties for assigned systems, maintaining their security posture through the RMF lifecycle
Develop and maintain authorization artifacts, including System Security Plans, POA&Ms, risk assessments, and incident response plans
Implement and validate security controls, and support assessors during the authorization process
Conduct vulnerability scanning, review audit logs, and perform STIG compliance checks; coordinate with system owners to remediate findings
Harden operating systems, applications, and network components to align with STIG and SRG baselines
Collaborate with DevSecOps engineers to integrate security tooling into CI/CD pipelines and translate control requirements into technical solutions
Apply DevOps practices such as containerization, Infrastructure-as-Code, and scripting to automate compliance evidence collection
Identify repeatable manual security tasks and work with the team to automate them
Investigate and document security incidents, and report findings to leadership and relevant stakeholders
Track emerging threats and evolving cybersecurity policy, and recommend improvements to Zaden’s security practices

Requirements

U.S. Citizenship and active security clearance (minimum Secret)
3+ years of cybersecurity experience, including hands-on work as an ISSO or in an equivalent information assurance role
Working knowledge of the Risk Management Framework (RMF) and NIST SP 800-53 security controls
Experience preparing and maintaining authorization packages, including SSPs and POA&Ms
Experience with vulnerability scanning and compliance tools such as ACAS/Nessus, SCAP Compliance Checker, or STIG Viewer
Hands-on experience hardening Linux or Windows systems
Strong written communication skills for security documentation and reporting
Genuine interest in learning DevOps tools and practices, with motivation to build those skills on the job
DoD 8140/8570 IAT Level II certification (for example, CompTIA Security+) or ability to obtain within 6 months of hire

Preferred Qualifications

Experience with eMASS or similar GRC platforms
Exposure to CI/CD tools such as GitLab CI, GitHub Actions, or Jenkins
Exposure to containers or orchestration tools such as Docker or Kubernetes
Basic scripting experience in Bash, Python, or PowerShell
Familiarity with cloud platforms such as AWS or Azure and their native security services
Experience with SIEM platforms such as Splunk or Elastic
Familiarity with zero trust architecture principles
Advanced certification such as CISSP, CISM, or CASP+

Technologies

Risk Management Framework (RMF), NIST SP 800-53
System Security Plans (SSPs), POA&Ms
ACAS/Nessus, SCAP Compliance Checker, STIG Viewer
Linux, Windows
DevOps, containerization, Infrastructure-as-Code, CI/CD pipelines
STIG, SRG
DoD 8140/8570, CompTIA Security+
eMASS
GitLab CI, GitHub Actions, Jenkins
Docker, Kubernetes
Bash, Python, PowerShell
AWS, Azure
Splunk, Elastic
Zero trust architecture
CISSP, CISM, CASP+

Location and Experience

Location: Huntsville, AL (onsite)

Minimum Experience: 3 years

View full job page →

1mo ago

Information Systems Security Engineer (ISSE)

TekSynap Arlington, VA

Arlington, VA

1mo ago Closed

$130k - $160k/yr Full time Cybersecurity Tools Disa Information Security

This position is no longer accepting applications (closed Oct 25, 2026).

Job Description

TekSynap is seeking an Information Systems Security Engineer (ISSE) to support cyber security and security engineering services for the National Military Command Center (NMCC) onsite in Arlington, VA.

Responsibilities

Provide cyber security and security engineering services for NMCC, including system security engineering, cybersecurity risk assessments, and security architecture support.
Perform or review technical security assessments of computing environments to identify vulnerabilities, non-compliance with cybersecurity standards and regulations, and recommended mitigation strategies.
Build, deploy, and patch HBSS Windows and ACAS RedHat Linux 7.9 and 8 servers.
Build, maintain, and patch ePO, Security Center, and Nessus servers.
Provide Security Center accounts for Vulnerability Managers to scan devices within ACAS.
Work with ACAS scan results and remediate vulnerability findings.
Manage the process of obtaining HBSS ePO licenses and Tenable Security Center licenses.
Obtain HBSS and ACAS kickstart ISOs from DISA.
Build and maintain virtual servers; deploy and patch McAfee modules via ePO.
Configure McAfee policies for each environment and perform STIGing for HBSS Windows OS and ACAS RHEL servers.
Run SCAP scans on Windows and RHEL servers.
Update RedHat 7.9 and 8 rpms as released, including setting up RedHat yum local rpm repositories for patching offline ACAS servers.
Deploy Rogue sensors on each subnet; identify rogue subnets and endpoints.
Troubleshoot Security Center and Nessus scanner issues.
Design, implement, and maintain complex information technology systems to accomplish key tasks.
Lead technical solutions from refining customer requirements through design, build, test, and deployment.
Design basic computing infrastructure, including networking rules for cybersecurity and troubleshooting network errors or technical issues.
Document and communicate technical solutions and analysis results to support recommended courses of action.

Requirements

Active TS/SCI security clearance.
Active CompTIA Security+ certification.
Bachelor’s degree in computer science, information technology, or a related field.
5+ years of experience with all aspects of systems engineering, including design and architecture.
Demonstrated capability to identify security risks across information system network structures, including operating systems, hardware, and data transfer protocols.
Effective communication and presentation skills for formal and informal group and individual settings.
Strong planning, organizational, and time management skills.
Demonstrated initiative and ability to work independently.
US Citizen (also noted with TS/SCI requirements).

Education Alternatives

Option 1: Master’s degree in subjects described above plus 3 years of experience.
Option 2: No degree with 12 years of intensive and progressive experience demonstrating required proficiency levels.

Technologies

HBSS, ACAS, RedHat Linux 7.9, RedHat Linux 8, Windows
ePO, Security Center, Nessus
SCAP, McAfee, STIG, RHEL, DISA, yum

Benefits

Health, dental, and vision
401K
Life insurance
Short-term and long-term disability plans
Vacation time and holidays

Work Environment and Physical Demands

Location: Arlington, VA (Office environment)
Noise level: Medium
Work schedule: Day shift Monday through Friday; evenings and weekends may be requested to meet program and contract needs.
Travel: Less than 10%
Physical demands: Regular use of hands; reach; talk or hear; stand, walk, sit; climb or balance; stoop, kneel, crouch, or crawl; lift up to 10 pounds regularly; frequently lift up to 25 pounds and up to 50 pounds.
Vision requirements: close vision, distance vision, peripheral vision, depth perception, and ability to adjust focus.

Work Authorization / Security Clearance

US Citizen
Active TS/SCI clearance

Compensation

Target salary range: USD 130,000 - 160,000 per year

TekSynap is a drug-free workplace and may conduct drug testing in accordance with federal, state, and local laws. Applicants may be subject to investigations to verify qualifications and eligibility. This job description is not a comprehensive listing of duties.