Senior Vulnerability Management Engineer (Tenable) - Active Secret clearance

Senior Vulnerability Management Engineer (Tenable)

Location: Remote (U.S.)

Clearance: Active Secret Clearance Required (TS/SCI Preferred)

Salary: $145,000 - $170,000

About the Role

PGTEK is seeking an experienced Senior Vulnerability Management Engineer to lead the engineering and administration of enterprise Tenable vulnerability management solutions supporting a large Department of Defense program.

This is a hands-on engineering role responsible for designing, deploying, optimizing, and maintaining the full Tenable platform while driving vulnerability remediation efforts across enterprise and classified environments. You'll work closely with cybersecurity teams, system administrators, ISSOs, and government stakeholders to improve the organization's overall security posture.

As the program grows, this position offers the opportunity to take on technical leadership responsibilities and mentor junior engineers.

Responsibilities

Administer and optimize the full Tenable platform, including:

Tenable.sc

Tenable Vulnerability Management (formerly Tenable.io)

Nessus

Nessus Agents

Perform authenticated and unauthenticated vulnerability scans across Windows, Linux, network, and cloud environments.

Analyze vulnerability data, validate findings, eliminate false positives, and prioritize remediation efforts based on risk.

Coordinate remediation activities with infrastructure, networking, and application teams through closure.

Manage scan schedules, repositories, credentials, scan zones, and agent deployments.

Troubleshoot scanning issues, credential failures, performance bottlenecks, and platform health.

Develop executive dashboards, compliance reports, and security metrics.

Support RMF continuous monitoring, POA&M management, and audit activities.

Integrate Tenable with ServiceNow, SIEM, asset management, and automation platforms.

Develop automation using PowerShell, Python, Bash, and Tenable APIs.

Recommend system hardening improvements and security best practices.

Provide technical mentorship to junior engineers and vulnerability analysts.

Support security investigations and incident response activities requiring vulnerability analysis.