Security Engineer, Vulnerability Management (ACAS/Tenable.sc) - Secret clearance

PGTEK is seeking a Security Engineer, Vulnerability Management with a Secret clearance (or higher) to administer and optimize our Tenable.sc/ACAS environment, drive vulnerability remediation across enterprise systems, and support compliance with DoD STIG and RMF requirements.

This is a hands-on role that combines deep Tenable platform expertise with Windows/Linux administration, vulnerability analysis, system hardening, and cross-team collaboration. The ideal candidate will have experience working in a DoD or federal environment and be comfortable managing vulnerability scanning and remediation across complex enterprise environments.

• Administer and optimize Tenable.sc and Nessus, including scan policies, scan zones, repositories, credentials, and audit files.
• Perform credentialed vulnerability scans, STIG compliance scans, discovery scans, and port scans.
• Analyze and interpret STIGs, CKLs, ACAS/Tenable findings, and vulnerability results to support compliance and risk reduction.
• Leverage Windows and Linux administration skills to support and troubleshoot authenticated vulnerability scanning.
• Conduct false-positive analysis and validation to ensure accurate vulnerability reporting.
• Collaborate with Cloud, Network, Platform, Security, and Engineering teams to drive vulnerability remediation and system hardening.

• Identify and close gaps in vulnerability scan coverage to ensure comprehensive visibility across the environment.
• Perform asset discovery and maintain accurate inventories to ensure all in-scope systems are included in scanning cycles.
• Analyze scan results to identify coverage gaps, unscanned assets, and compliance blind spots.
• Recommend corrective actions to improve vulnerability visibility, scanning effectiveness, and overall security posture

• 5+ years of experience in vulnerability management, information assurance, or systems security, preferably within a DoD or federal environment.
• Hands-on experience administering Tenable.sc, Nessus, and ACAS in a DoD or federal environment.
• Working knowledge of DoD STIGs, CKLs, and RMF processes.
• Strong Windows and Linux administration experience.
• Active DoD Secret clearance required; clearance must be current and verifiable.
• DoD 8570/8140 IAT Level II baseline certification required, such as:
• CompTIA Security+ CE
• CySA+
• GSEC
• SSCP
• CCNA-Security
• Strong written and verbal communication skills with the ability to collaborate effectively across technical teams.

This is a hybrid position. Candidates must live within approximately 90 minutes of one of the following locations:

• Mechanicsburg, PA
• Ogden, UT
• Oklahoma City, OK
• Montgomery, AL
• Fort Meade, MD

Approximately 25% travel may be required to DISA locations.

PGTEK offers the opportunity to work on long-term federal technology programs while supporting mission-critical cybersecurity and infrastructure initiatives.