Note: The job is a remote job and is open to candidates in USA. OneZero Solutions is an employee-centric company that builds technically proficient teams across cyber mission areas and supports customer missions. The Cyber Security Engineer III serves as the dedicated Tenable platform lead, owning engineering, operations, maintenance, integrations, scanning, reporting, and continuous availability of the vulnerability and compliance platform. The role also leads scanning and agent deployment efforts, supports compliance and penetration testing activities, and mentors other security engineers.
Responsibilities
- Serve as the dedicated, full-time Tenable subject matter expert; maintain 24x7x365 platform availability and lead the on-call rotation
- Administer the Tenable platform end toend:integrations, troubleshooting, backups, patching and version upgrades, user access and role management, plugin and feed updates
- Design and maintain scan templates, policies, and schedules to ensure requiredcoverage: weeklyservers, monthly workstations, and any additional cadence required by Binding Operational Directives (RMF Step 6)
- Perform ad-hoc and BOD-specific scans on request to confirm hardened server builds for developers, production applications, and appliances
- Ensure all in-scope assets are onboarded, grouped, and tagged in Tenable in accordance with CA configuration standards; support CA iPost application groupings and asset inventory accuracy
- Develop dashboards, reports, and metrics for the ISSM, AO, ISSOs, and other stakeholders, including KEV, CVE, and STIG compliance reporting
- Lead Nessus Agent deployment, data ingest and sharing, pipeline, and other integration efforts
- Deliver vulnerability and compliance scan results to ISSOs within timelines and to the assessment team during RMF Step 4
- Coordinate logistics for Red Cell penetration testing and Blue Team cyber hygiene scans; support hardened-build verification
- Document platform architecture, SOPs, and configuration baselines; provide Tenable evidence for the Evidence Index and SSPs
- Mentor the Cyber Security Engineer on platform operations and serve as escalation point for scanning issues
Skills
- Seven (7)+ years of cybersecurity or systems engineering experience, including four (4)+ years administering Tenable (Tenable Security Center / tenable.sc, Nessus, Nessus Agents, Tenable One / Vulnerability Management) at enterprise scale
- Strong Linux and Windows administration skills and scripting proficiency (Python, PowerShell, or Bash) including use of REST APIs for automation and reporting
- Experience with STIG/SCAP compliance scanning and audit files
- Active, final SECRET security clearance; U.S. citizenship
- DoD 8140/8570 IAT Level III baseline certification (e.g., CISSP, CASP+, GCIH, GCED) or IAT Level II with ability to obtain Level III within 6 months
- Experience supporting a 24x7 on-call rotation for a production security platform
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or an additional four (4) years of directly relevant experience in lieu of degree
- Remote. Duties are performed remotely; the selected candidate must reside within the National Capital Region (NCR)
- Local travel within the National Capital Region; minimal other travel
- Tenable certifications (Tenable Security Center Specialist, Nessus Specialist, Tenable One)
- Department of State experience, including iPost integration; DoD ACAS experience
- Experience with Wiz or another CNAPP for cloud scanning; SIEM (Splunk) integration
- Experience with CISA BOD 22-01 (KEV) and BOD 23-01 asset visibility reporting
Benefits
- Health insurance
- Dental insurance
- Vision insurance
- Life insurance
- 401(k) with company matching
- Paid time off and holidays
- Employee referral program
- Educational assistance
- Remote work; duties are performed remotely
- OneZero provides the laptop and collaboration tools
Company Overview