Tenable Nessus

Tenable Nessus Engineer Jobs

31 jobs found

2d ago

Embedded Cybersecurity Engineer II

AeroVironment Moorpark, CA

Moorpark, CA

2d ago

$82k - $125k/yr Full time Cybersecurity Tools Embedded Systems Embedded Systems Security

Apply Now

Job Description

The Embedded Cybersecurity Engineer II will help secure AeroVironment embedded systems by partnering with R&D and Operations to implement security controls, support compliance with relevant standards and contract requirements, and advance embedded cybersecurity activities across the product development lifecycle.

Location and Employment Details

Location: Moorpark, CA (onsite)
Salary: USD 82,000 - 125,000 per year
Experience level: 2+ years

Responsibilities

Collaborate with product R&D teams to align on a security mindset and guide implementation of specific security controls for product and system-wide security needs.
Coordinate with Electrical and Hardware engineering to ensure security requirements are incorporated into hardware selection and design.
Support the embedded system architect and developers to ensure security controls are implemented as intended.
Support consistent application of embedded system security practices across projects.
Coordinate with SW developers and manufacturing engineering to ensure security needs are addressed.
Identify embedded security needs across embedded hardware, firmware, software, and microprocessors.
Support selection of hardware components, third-party software, security tools, and vendors; identify security vulnerabilities and weaknesses within system design and architecture.
Contribute to development of tools, processes, and policies to prevent, detect, and resolve classes of issues across the development lifecycle, including supply chain and manufacturing.
Conduct embedded product and device cybersecurity activities, including incident response, vulnerability assessments, and mitigation implementation.
Continuously evaluate the effectiveness of implemented cybersecurity controls.
Implement new approaches and countermeasures for emerging threats to embedded systems.
Provide security-related deliverables for regulatory bodies and contractual requirements.
Assess software applications and control procedures.
Perform other duties as assigned.

Required Qualifications

Education: Bachelor’s degree in Cybersecurity, Electrical or Computer Engineering, Computer Science, or similar or related field (or equivalent combination of education, training, and experience).
Experience: Two years of experience in cybersecurity and embedded hardware.
Certifications: CompTIA Security+, GIAC Security Essentials (GSEC), or equivalent verifiable credentialed certification.
Strong written and verbal communication skills.
Strong analytical, time management, and organizational skills.
Strong computer skills and proficiency with office software and productivity tools.
Ability to work with little or no supervision and apply independent judgment regularly.
Ability to gain cooperation and conduct presentations of technical information for specific projects or schedules.
Additional certification options may include CISSP, CISM, CompTIA Advanced Security Practitioner (CASP) or equivalent verifiable credentialed certification.
Additional certification options may include CEH, Offensive Security Certified Professional (OCSP), or equivalent verifiable credentialed certification.
Experience achieving ISO 27001 certification.
Experience complying with NIST Cybersecurity standards and guidance.
Experience complying with the National Industrial Security Program Operating Manual (NISPOM).
Experience in one or more technical areas:
- Wireless and/or network communications
- Basic knowledge of common hardware components, packaging, and PCBA-level integration
- Basic knowledge of common cryptographic algorithms and protocols, including implementation attacks (side-channel and fault injection)
- Hardware security implementation analysis and exploitation (cryptography, side-channel analysis, and/or fault injection)
- Testing and validation of cybersecurity control implementation using manual methods and automated tools (e.g., ACAS, Tenable.sc, Nessus, Nexpose)

Relevant Technologies

CompTIA Security+
GIAC Security Essentials (GSEC)
CISSP
CISM
CompTIA Advanced Security Practitioner (CASP)
Certified Ethical Hacker (CEH)
Offensive Security Certified Professional (OCSP)
ISO 27001
NIST Cybersecurity standards and guidance
NISPOM
ACAS
Tenable.sc
Nessus
Nexpose

Benefits

Medical, dental, vision
401K with company matching
9/80 work schedule
Paid holiday shutdown

Physical Demands

Ability to sit, stand, stoop, reach, lift (up to 25 lbs.), bend, and similar physical movements.
Hand and wrist dexterity to use a computer.
May require travel to sites/program and special functions.

Environmental Conditions

Office environment with climate control via central air conditioning and heating.
Occasional work on the production floor may be required.
May have some exposure to outside environment while traveling.

Special Requirements and Clearance

U.S. Citizen
Must be able to travel within the Continental U.S. and internationally when required.
Must have a DoD Secret security clearance or be eligible to obtain one.
Clearance level: Secret

ITAR and Export Compliance

This role requires access to information subject to compliance with the International Traffic Arms Regulations (ITAR) and/or the Export Administration Regulations (EAR).
Applicants must qualify as a U.S. person under ITAR and EAR, or be approved for an export license by the governing agency whose technology comes under its jurisdiction.
A “U.S. person” includes U.S. citizens, U.S. lawful permanent residents (green card holders), or protected individuals such as refugees or asylees (per 22 CFR § 120.15).
Some positions may require current U.S. citizenship due to contract requirements.
ITAR: U.S. Citizenship required; must be willing to work on government contracts and have the ability to obtain a security clearance.

View full job page →

2d ago

Senior Cybersecurity Engineer

Odyssey Systems Consulting Group, Ltd. Hanscom AFB, MA

Hanscom AFB, MA

2d ago

$175k - $185k/yr Full time Senior Cybersecurity Cybersecurity Tools

Apply Now

Job Description

Senior cybersecurity role supporting Air Force Life Cycle Management Center Ground Base Air Defense Sensor division (AFLCMC/ESG) at Hanscom AFB, Bedford, MA (onsite).

Responsibilities

Support installation, configuration, and maintenance of ACAS components, including Nessus scanners, SecurityCenter/Tenable.sc, and Nessus Network Monitor (NNM)/Tenable.asm
Schedule and execute vulnerability scans using Nessus scanners
Review scan results to identify vulnerabilities and misconfigurations
Perform DISA STIG-based configuration hardening across multi-classification networks
Assist with compliance assessments against DoW standards and internal security policies
Produce reports covering vulnerability status, compliance posture, and remediation progress
Coordinate with system administrators to support vulnerability remediation activities
Assist with system administration tasks for ACAS servers and databases
Manage cybersecurity incident reporting and perform root-cause analysis
Develop corrective action plans and maintain POA&Ms
Track evolving vulnerability trends and security threats to support ongoing risk management

Requirements

US citizenship
Ability to obtain and maintain an Active Secret clearance
CISSP certification
Bachelor’s degree in a professional engineering discipline from an ABET-accredited program
At least 10-15 years of experience in the respective technical/professional discipline, with 10 years in the DoD
Understanding of cybersecurity in DoD cloud infrastructure
Knowledge of Agile methodologies, including CI/CD, DevSecOps, and DevOps
Experience with systems analysis and eMASS
Strong written and verbal communication skills for technical topics

Technologies

ACAS
Nessus
SecurityCenter/Tenable.sc
Nessus Network Monitor (NNM)/Tenable.asm
DISA STIG
Nessus scanners
Risk Management Framework (RMF)
eMASS
Agile methodologies
CI/CD
DevSecOps
DevOps
PKI

Compensation

USD 175,000 - 185,000 per year

Location

Hanscom AFB, MA (onsite)

Benefits

Medical, dental, and vision
Life insurance
Tricare supplement
Short-term disability
Long-term disability
401(k) match
Flexible spending accounts
Health savings accounts
Employee assistance program
Learning and development benefit
Paid time off
Holidays

View full job page →

2d ago

Information Systems Security Engineer

Parsons Texas

Texas

2d ago

$88k - $155k/yr Full time Acas Stig Scap Scans Information Security Information Technology (IT)

Apply Now

Job Description

Parsons is looking for an Information Systems Security Engineer to support a Department of Defense (DoD) system in Texas. In this role, you will help protect the system by mitigating vulnerabilities, supporting compliance requirements, and maintaining an effective security posture in collaboration with the ISSO.

The position focuses on recurring vulnerability scanning, DISA STIG validation, POA&M remediation execution, and documentation support aligned to NIST RMF and NIST SP 800-53.

Key Responsibilities

Run monthly System Security Plan (SSP) ACAS vulnerability scans and perform quarterly ACAS Security Technical Implementation Guide (STIG) / SCAP scans.
Complete monthly SSP patch version upgrades to help ensure systems remain secure and compliant.
Conduct annual manual STIG checks for system components that cannot be scanned automatically.
Serve as the primary technical remediator for POA&M findings, carrying out remediation tasks based on Jira tickets generated by the ISSO.
Support the ISSO with investigating and responding to security alerts and logs.
Maintain and update critical security documentation, including network/system diagrams, Hardware/Software (HW/SW) lists, and Ports, Protocols, and Services Management (PPSM) documentation.
Assist the ISSO with drafting, updating, and maintaining NIST RMF documentation in accordance with NIST SP 800-53 guidance.

Required Qualifications

Active TS/SCI.
Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related technical field (or equivalent years of relevant work experience).
4+ years of hands-on experience in cybersecurity engineering, systems administration, or a related role within a DoD or federal environment.
Active baseline Information Assurance Technical (IAT) Level II or Level III certification (examples include CompTIA Security+ CE, CASP+ CE, CISSP, or equivalent).
Hands-on experience using Assured Compliance Assessment Solution (ACAS) / Tenable Nessus for vulnerability and compliance scanning.
Strong background applying and validating DISA STIGs across operating systems (including Windows and Linux) and network devices.
In-depth knowledge of NIST Risk Management Framework (RMF) and NIST SP 800-53 security controls.
Experience with patch management and system upgrades in a secure, air-gapped, or highly regulated environment.
Experience using Jira (or similar ticketing systems) for tracking workflows and technical remediation tasks.
Ability to translate technical vulnerabilities into actionable remediation steps.
Excellent communication skills and the ability to work collaboratively with the ISSO and other stakeholders.
Advanced scripting skills (including PowerShell, Python, or Bash) to automate STIG application and compliance checks.

Technologies

Assured Compliance Assessment Solution (ACAS)
Tenable Nessus
ACAS Security Technical Implementation Guide (STIG)
SCAP
NIST Risk Management Framework (RMF)
NIST SP 800-53
DISA STIGs
Jira
PowerShell
Python
Bash
OpenSearch
Elasticsearch
Visio

Desired Skills

Advanced degree preferred.
Experience configuring and analyzing logs within OpenSearch, Elasticsearch, or similar SIEM/log analysis tools.
Familiarity with DoD PPSM processes and registry requirements.
Operating System/Computing Environment (CE) certifications (examples include Microsoft Certified: Azure Administrator and Red Hat Certified System Administrator).
Experience developing network and rack diagrams in Visio.

Location and Clearance

Location: Texas (onsite)
Security Clearance Requirement: An active Top Secret SCI security clearance is required.

Salary and Benefits

Salary range: USD 88,400 - 154,700 per year.

medical, dental, vision
paid time off
401(k)
life insurance
flexible work schedules
holidays

Competitive Benefit Offerings

Financial Wellness
Work Life Harmony
Career Development
Veteran Support
Mind & Body
Health

View full job page →

7d ago

Mid Cybersecurity Engineer

Amentum Schriever Space Force Base, CO; Redstone Arsenal, AL

Schriever Space Force Base, CO; Redstone Arsenal, AL

7d ago

$120k - $130k/yr Full time Cybersecurity Tools Hbss And Ess Incident Response

Apply Now

Job Description

Join the IRES contract team supporting proactive and reactive cybersecurity operations for the Missile Defense Agency.

Responsibilities

Perform cybersecurity duties on customer networks to improve enterprise-wide security posture (proactive and reactive).
Analyze and process Cyber Task Orders (CTOs), including tracking, reporting, and briefing on tasks such as IAVM compliance, device confiscations, research and investigation, website blocks, and related compliance projects.
Perform and analyze vulnerability scans without affecting network operations using Assured Compliance Assessment Solution (ACAS/Nessus).
Conduct network security threat and impact assessments and prepare assessment reports.
Use Defensive Cyber Operations (DCO) tools to analyze and correlate events, vulnerabilities, and STIGs from network security devices and mission critical infrastructure (network and host-based security systems, firewalls, routers, switches, servers, workstations, and more) to identify indicators of compromise, attack vectors, and known attack patterns.
Analyze and interpret log data within tools such as ACAS and HBSS/ESS.
Analyze vulnerabilities against known exploits in an enterprise cyber-threat environment and disseminate guidance to strengthen defensive posture.
Support the development, establishment, review, and updates of Tier III LCC procedures, processes, manuals, and documentation.
Assist with host-based security across the enterprise using DoD Host Based Security System (HBSS), including antimalware, host-based intrusion protection system, data loss prevention, and rogue system detection.
Support Incident Response across the enterprise in accordance with DoD regulations and instructions.
Generate vulnerability assessment reports for customers and escalate for further review.
Create, update, and manage queries and dashboards related to HBSS, ACAS, and related security tools.
Support review and updates of CND procedures, processes, manuals, and other documentation.

Requirements

2+ years of general (full-time) work experience.
6+ months of directly related cyber or systems engineering experience.
1 year of managerial experience.
Current DoD 8570 IAT Level II certification (examples provided: Security+, CISSP).
Must have, or obtain, an active DoW Secret Security Clearance.

Technologies

Microsoft Office applications: Word, Excel, PowerPoint, Visio
Assured Compliance Assessment Solution (ACAS), Nessus, Tenable ACAS
Defensive Cyber Operations (DCO)
DoD Host based Security System (HBSS), HBSS/ESS
McAfee ePolicy Orchestrator
Firewalls
Intrusion Detection Systems / Intrusion Prevention Systems
Network Security Manager
Bluecoat, Barracuda

Benefits

Health, dental, and vision insurance
Paid time off and holidays
Retirement benefits including 401(k) matching
Educational reimbursement
Parental leave
Employee stock purchase plan
Tax-saving options
Disability and life insurance
Pet insurance

Additional details

Location: Schriever Space Force Base, Colorado Springs, CO or Redstone Arsenal, Huntsville, AL (onsite)
Salary: USD 120,000 - 130,000 per year
Clearance type: DoW Secret
Shift: Day shift
Travel: Up to 10%
Remote/Telework: NO (not available)
Relocation assistance: None available at this time

The successful candidate will have

Experience with most Microsoft Office applications (Word, Excel, PowerPoint, Visio).
Ability to multitask and prioritize multiple projects and assignments in a dynamic environment to meet scheduled and unscheduled customer requests.
Willingness to travel up to 10% of the time.
Ability to support periodic on-call requirements.
Experience operating Tenable ACAS solutions.
Experience operating McAfee ePolicy Orchestrator.

Desired requirements

Associate’s or bachelor’s degree in Cybersecurity, Computer Science, or related field.
Experience with security analysis and solutions in a WAN/LAN environment including routers, switches, network devices, and operating systems (e.g., Windows and Linux).
Experience with SOC/DCO tools/applications such as firewalls, IDS/IPS, Network Security Manager, Bluecoat, Barracuda, and similar tools.
Experience performing security compliance scans across a WAN (ACAS/Nessus preferred).
Background in configuration, troubleshooting, and deployment of host-based security (HBSS preferred).
Relevant computing environment certifications (HBSS/ESS, ACAS, Windows, Linux, etc.).
Familiarity with SOC/DoD.
Active DoD Top Secret clearance.

View full job page →

8d ago

Cyber Security Engineer With Python & API Integration

EAPPS TECH LLC dba Magicforce Portland, OR

Portland, OR

8d ago

$60 - $70/hr Full time Backend Developer Python API

Apply Now

Job Description

As a Cyber Security Engineer on an Agile team, you will support the development of healthcare applications by implementing new features and maintaining high standards for secure, production-ready code. The role emphasizes Python-based integrations, REST API work, and hands-on experience with modern security platforms and tools.

Core Responsibilities

Design, implement, and troubleshoot REST APIs, ensuring reliable integration and end-to-end functionality.
Read and interpret API documentation, construct API calls, and apply authentication mechanisms including OAuth, API keys, and bearer tokens.
Use production-ready Python to build tool integrations and automation workflows.
Gain hands-on experience with at least three (3) of the following platforms:
- Tenable Nessus or Tenable VM (vulnerability management)
- Imperva WAF (web application firewall)
- Brinqa (SOAR security orchestration, automation, and response)
- Synopsys Polaris or similar SCA tools (software composition analysis)
- Microsoft Defender for Endpoint (EDR/MDR)
- Crowdstrike Falcon or Falcon Shield (endpoint protection/detection and response)
- IBM Guardium (database activity monitoring and security)
- Trend Micro VisionOne (threat intelligence and incident response)
- Zscaler ZIA or Zscaler ZPA (cloud-based security, optional but valuable)

Required Education and Qualifications

Engineering Degree: BE / ME / BTech / MTech / B.Sc. / M.Sc.
Technical certification in multiple technologies is desirable.

Mandatory Technical Skills

Security engineering experience with Python and API integration.

Key Technologies

Python
REST APIs
OAuth, API keys, bearer tokens
Tenable Nessus, Tenable VM
Imperva WAF
Brinqa
Synopsys Polaris / SCA tools
Microsoft Defender for Endpoint
Crowdstrike Falcon, Falcon Shield
IBM Guardium
Trend Micro VisionOne
Zscaler ZIA, Zscaler ZPA

Role Details

Location: Portland, OR (onsite)
Compensation: USD 60 to 70 per hourly

View full job page →

10d ago

Senior Information Systems Security Engineer

MANTECH Washington, DC

Washington, DC

10d ago

Full time Senior Ibm Guardium Information Security

Apply Now

Job Description

Make an impact on mission-ready security. MANTECH is seeking a Senior Information Systems Security Engineer for an onsite role in Washington, DC. In this position, you will support accreditation efforts by responding to, implementing, and documenting required controls, helping teams successfully complete required tasks and actions.

What you’ll do

Design secure architectures, hardware, operating systems, and software applications so cybersecurity requirements are addressed across the IS and Network Environment.
Design, develop, and implement network security measures and countermeasures to support confidentiality, integrity, availability, authentication, and non-repudiation.
Integrate and implement security protocols with Cross Domain Solutions (CDS) for use within the IS and Network Environment.
Develop interface specifications and approaches to mitigate vulnerabilities, recommending changes to network system components when needed.
Ensure network system designs support the seamless incorporation of directed cybersecurity vulnerability solutions.
Document responses to required controls and maintain a robust documentation library to support the Sponsor’s accreditation process.
Partner with management, internal teams, and stakeholders to deliver complete, functioning systems aligned to mission requirements.

What you’ll need

Bachelor’s degree or equivalent (6 additional years of experience) in computer science, business management, or an IT-related discipline.
10+ years of related information systems security experience, or a Master’s degree with 7+ years of experience.
Relevant industry certifications, such as CCISO, CISA, CISM, CISSP, CISSP-ISSEP, CySA+, GSLC, GSNA, CCNP Enterprise, CISSP-ISSAP, GCIA, GDSA, or GICSP.
4+ years focused experience in one or more areas including penetration testing techniques; computer evidence seizure, forensic analysis, and data recovery; intrusion analysis and incident response; intrusion detection; network surveillance and monitoring; network protocols, devices, multiple operating systems, and secure architectures.
Significant experience navigating technical accreditation processes and producing Assessment & Authorization (A&A) Body of Evidence (BOE) documentation.
Familiarity with standard security and discovery tools including Tenable Nessus, Security Center, IBM Guardium, HP WebInspect, and Network Mapper (NMAP).
Hands-on experience utilizing cyber risk and compliance automation tools.
Self-starter with excellent interpersonal skills, able to work across teams, organize briefs/boards, and drive change throughout an organization.

Tools and technologies

Cross Domain Solutions (CDS)
Tenable Nessus
Security Center
IBM Guardium
HP WebInspect
Network Mapper (NMAP)

Clearance and physical requirements

Must have a current/active Top Secret and be able to obtain TS/SCI.
Ability to obtain and maintain a polygraph.
Must be able to remain in a stationary position 50% of the time.
Needs to occasionally move about inside the office to access file cabinets, office machinery, and other equipment.
Frequently communicates with co-workers, management, and customers, which may involve delivering presentations.
Must be able to exchange accurate information during these interactions.

View full job page →

10d ago

Information Systems Security Engineer

Base-2 Solutions United States

United States

10d ago

Full time Cyber Security Cybersecurity Tools Identity and Access Management

Apply Now

Job Description

Base-2 Solutions is hiring an Information Systems Security Engineer (ISSE) to help protect national defense and mission-critical systems as part of an on-site team in the United States. This role combines security engineering, risk management, and cybersecurity compliance work, with opportunities to drive documentation, testing, and certification and accreditation support. You will work within established policy and frameworks while collaborating across system, software, and network disciplines.

Responsibilities

Develop, implement, and maintain security solutions for complex systems to support confidentiality, integrity, and availability.
Perform system security analysis, risk assessments, and vulnerability assessments to identify, evaluate, and mitigate risk.
Contribute to security architecture and system security engineering artifacts aligned to NIST, DoD, and IC policies and guidance.
Collaborate with system architects, software engineers, and network engineers to incorporate security requirements into system design.
Develop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), and Risk Management Framework (RMF) documentation.
Support continuous monitoring and compliance with security standards such as NIST SP 800-53, ICD 503, CNSS, and related requirements.
Recommend improvements to system security posture and address security incidents as they arise.
Participate in security testing, evaluation, and certification and accreditation (C&A) activities.
Interface with government customers and stakeholders to communicate technical information and security strategy.

Required Qualifications

Experience with cybersecurity frameworks and standards including NIST SP 800-53, RMF, ICD 503, CNSS, and DoD STIGs.
Hands-on experience with security tools such as ACAS, Nessus, Tenable, Splunk, Wireshark, HBSS, and McAfee ePO.
Experience with security technologies including firewalls, IDS/IPS, SIEMs, VPNs, PKI, and multi-factor authentication.
Experience producing and maintaining system security documentation: SSPs, POA&Ms, SARs, and Security Control Traceability Matrix (SCTM).
Experience with Linux, Unix, Windows, and virtualization technologies such as VMware and Hyper-V.
Experience with cloud platforms including AWS, Azure, and Google Cloud, with a focus on cloud security.
Knowledge of encryption protocols and technologies such as TLS/SSL, IPsec, VPN, and PKI.
Experience with security testing tools including Nmap, Metasploit, Burp Suite, and Kali Linux.
Scripting and automation experience with Python, PowerShell, and Bash.
Knowledge of SDLC, software assurance, and secure coding practices.
Experience collaborating and tracking issues using tools such as JIRA, Confluence, and ServiceNow.
Certifications including CISSP, CAP, CEH, Security+, AWS Security Specialty, or equivalent.

Benefits

Competitive fixed salary or hourly pay (based on experience, skills, location, and internal equity).
Employee referral bonuses up to $10,000 per hired referral.
Additional bonus opportunities for exceptional performance and contributions to business development and company growth (role-dependent).
100% company-paid medical premiums for employees and eligible dependents, with plan options through CareFirst, Kaiser, and UnitedHealthcare (PPO, POS, HMO, and HSA-compatible plans).
100% company-paid dental premiums for employees and eligible dependents.
100% company-paid vision premiums for employees and eligible dependents.
100% company-paid premiums for short-term disability and long-term disability.
100% company-paid premiums for accidental death & dismemberment (AD&D).
100% company-paid life insurance up to $200,000.
401(k) with immediate vesting: 4% company match plus 4% non-elective contribution (8% total), with pre-tax and Roth options.
Up to 20 days of flexible paid time off (PTO) and 11 paid floating holidays.
Flexible work schedules including flex time and compressed work periods (contract and project-dependent).

Location: Annapolis Junction, MD (On-Site). Shift: First. Requisition ID: 4914. Referral eligibility: Eligible. U.S. citizenship required: Yes. Required security clearance: Active Top Secret/SCI with Full Scope Polygraph.