Tenable Nessus Administrator SME

Tenable Nessus Administrator Sme

CACI is looking for a Tenable Nessus Administrator SME to support our DoD customer to implement an enterprise IT service delivery model that provides consistent, secure, high-quality, and cost-effective services to enable mission success and improve end user experience across the customer environment. On this program, CACI will deliver enhanced capabilities and services to implement and operate an enterprise ITSM solution, enterprise service desk, endpoint management and security solution, as well as CONUS/OCONUS field support and life cycle support for end user devices to enable the DoD customer to transition focus from IT operations to mission operations.

As a Tenable Nessus Administrator SME, you will be responsible for team oversight, development, and management of ACAS scanning activities to enhance the organization's cybersecurity posture. Your primary focus will be overseeing and managing our ACAS (Assured Compliance Assessment Solution) scanning activities and the overall Tenable solution. You will work closely with the cybersecurity team, IT staff, and other stakeholders to ensure the effective operation of ACAS solution and their integration into the organization's infrastructure.

This position is hybrid, with on site work located in Chantilly, VA.

Responsibilities:

You will be a Tenable-Nessus Security Administrator SME for the Engineering Operations team for the EITaaS Enterprise solution based on Tenable-Nessus. Job duties include:

• Manage, develop, and mentor the ACAS scanning team
• Oversee the administration, maintenance, and sustainment of the ACAS solution
• Maintain and configure Nessus, Nessus Manager, Nessus Agents, Log Correlation Engine, Nessus Network Monitor, and Security Center on both Linux/Unix and Windows based environments
• Ensure compliance with organizational security policies and industry best practices
• Develop and implement strategies to optimize scanning processes and improve vulnerability management
• Collaborate with cross-functional teams to address security findings and implement remediation plans
• Generate and present reports to stakeholders on vulnerability assessments and risk mitigation efforts
• Responsible for installing and configuring Nessus Agents
• Secure Tenable server and Enable TLS
• Integrating Tenable products with LDAP, Active Directory, and CyberArk.
• Responsible for the creation of tenable Organizations, Repositories, and Scan Zones.
• Responsible for local and LDAP based user management.
• Responsible for configuring tenable plugins/feeds and adding audit files
• Responsible for adding scan policies, audit policies, and credentials to Security Center, and Nessus Manager.
• Responsible for configuring Nessus Manager scan pulls to Security Center
• Responsible for defining scan policies and audit policies
• Responsible for adding scan credentials
• Responsible for Scheduling scans
• Responsible for Generating Scan Reports
• Responsible for importing/uploading scan reports for Vulnerability
• Responsible for the Analysis and validation of the scan results.

Qualifications:

Required:

• Required DoD 8140 compliant certification such as CompTIA Security+
• Other relevant cybersecurity certifications like Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM), are a plus.
• Must have a Secret Clearance
• 15+ Years of relevant experience (Bachelor's Degree in relevant field may be substituted for 5 years of relevant experience).Proven experience as a Nessus-Tenable Security Administrator or in a similar role, with hands-on experience in managing security tools.
• In-depth knowledge of the following security technologies: Nessus Tenable (ACAS), Microsoft Defender for Endpoint, and STIG Management.
• Familiarity with network and system security principles, protocols, and configurations.
• Strong analytical and problem-solving skills to troubleshoot and resolve complex security tool issues.
• Excellent communication and collaboration skills to work effectively with cross-functional teams.
• Understanding of industry compliance standards (e.g., NIST) and relevant regulations (e.g., GDPR, HIPAA) is advantageous.
• Willingness to stay updated with the latest cybersecurity trends and emerging security tools.

Pay Range: There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits. The proposed salary range for this position is: $90,300-$189,600

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.