Vulnerability Management Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Administer, engineer, and manage the infrastructure of Tenable products.

• Develop, optimize, and sustain multi-tenant shared instances and independent client consoles across Tenable Vulnerability Management, Tenable Security Center, Tenable OT Security, and other Tenable modules.

• Oversee distributed scanning infrastructure, which includes on-premise Nessus scanners, cloud scanner pools, and Tenable Nessus Agents.

• Detect offline scanners, stale agent check-ins, plugin update failures, and linked-scanner issues, coordinating resolutions with client teams.

• Set up and maintain RBAC definitions, custom asset groups, and scanning permissions.

• Manage Tenable API data-ingestion pipelines into analytical hubs, Google SecOps (Chronicle), and ServiceNow.

• Design, schedule, and perform both credentialed and uncredentialed vulnerability scans across hybrid infrastructures.

• Operate on-premise Tenable Security Center deployments, focusing on repository configuration, scan-zone design, and analytic queries.

• Carry out specialized Tenable OT Security scans for industrial control systems where appropriate.

• Create custom dashboards, asset filters, and saved scan templates.

• Utilize Tenable VPR and CES to prioritize exploitable threats.

• Transform vulnerability data into prioritized technical remediation checklists and conduct ongoing technical reviews with client infrastructure teams.

⛳️ Requirements

• Over 4 years of experience in cybersecurity operations, system administration, or vulnerability management.

• At least 2 years of focused, hands-on Tenable administration on a large scale across 10,000+ assets.

• Expertise in troubleshooting credentialed scanning failures over SMB and SSH.

• Capability to manage multiple client tenants without risking cross-contamination of client data, credentials, or findings.

• Must possess at least one active mandatory technical certification: Tenable One Vulnerability Management Specialist, Tenable Security Center Specialist, or Tenable One OT Exposure Specialist.

• Proficient knowledge of Tenable distributed scanning components.

• Practical experience in executing advanced credentialed scans.

• Holding multiple Tenable Specialist certifications is advantageous.

• Certifications such as Google SecOps / Chronicle Certified Professional, CompTIA Security+ / Network+ / Linux+, or CEH are beneficial.

• Familiarity with Tenable Web App Scanning, Identity Exposure, Cloud Security, Attack Surface Management, Patch Management, Tenable One platform capabilities, AI Exposure, Enclave Security, PCI ASV, or Nessus Expert is helpful.

• Understanding of Tenable licensing across modules, including asset counts, resource ratios, and add-on components in an MSSP environment.

🏝️ Benefits

• Comprehensive medical insurance options.

• Employer-covered Dental insurance.

• Employer-funded Short-Term Disability (STD) coverage.

• Employer-funded Long-Term Disability (LTD) coverage.

• Three weeks of paid vacation.

• Additional sick leave available.

• Paid company holidays.

• World-class training and mentorship opportunities.

• Support for career development towards technical specialization or leadership roles.

• Opportunity to work with cutting-edge AI-enhanced security tools and GCP native technologies.