Security Analyst

• Serve as the primary administrator for Tenable Security Center (SC) and Nessus vulnerability scanners.
• Perform authenticated and unauthenticated vulnerability scans across enterprise systems.
• Analyze scan results and prioritize remediation activities using CVSS scores, CISA Known Exploited Vulnerabilities (KEV), and organizational risk criteria.
• Produce recurring vulnerability reports for management, system owners, and compliance activities.
• Track remediation progress and validate vulnerability closures.
• Manage vulnerability waivers, risk acceptance documentation, and exception tracking.
• Monitor End-of-Life (EOL), End-of-Support (EOS), and Binding Operational Directive (BOD) vulnerability requirements.
• Coordinate with stakeholders across technical teams to drive timely vulnerability remediation efforts.

 

• Experience with:
• Firewall Management
• Cisco
• Checkpoint
• IDS/IPS technologies
• Log aggregation systems (Splunk)
• File integrity monitoring solutions
• Red Hat Linux
• Windows workstation and server OS
• MacOS
• Participate in incident investigations and support cybersecurity response activities.
• Assist with security assessments and continuous monitoring activities.

 

• Perform application vulnerability scanning.
• Coordinate vulnerability remediation with application owners.
• Support troubleshooting for application security issues.
• Partner with the Application Development team to identify security improvements throughout the software lifecycle.

  

Support organizational compliance initiatives including:

• NIST 800-53
• FISMA
• NIH/HHS cybersecurity policies
• CISA Binding Operational Directives (BODs)
• Continuous Monitoring (ConMon)

Prepare:

• Executive vulnerability reports
• Compliance dashboards
• Monthly security metrics
• Remediation status reports

 

Serve as the primary coordinator for annual penetration testing activities.

Responsibilities include:

• Coordinating testing schedules
• Supporting external penetration testing teams
• Managing findings
• Tracking remediation efforts
• Validating corrective actions
• Producing final response documentation

 

Provide day-to-day operational cybersecurity support including:

• Customer requests
• Security consultations
• Incident investigations
• Security engineering support
• Technical documentation

 

Working knowledge of:

• NIST 800-53
• NIST Cybersecurity Framework (CSF)
• Risk Management Framework (RMF)
• FISMA
• CISA Binding Operational Directives (BODs)
• Continuous Monitoring (ConMon)

 

• Bachelor’s degree in Computer Science, Information Systems, Engineering, or related field. Equivalent experience.

• 5–8 years of experience in information security, network security, or related fields.
Experience working in Data Center or hybrid infrastructure environments  

One or more of the following preferred:

• CompTIA Security+
• Tenable Certified Professional (TCP) 
• ITIL certification preferred.