Required Skills
This role is one that involves daily direct interaction with clients, and requires someone who is self-driven, takes initiative and communicates proactively and professionally. This individual will perform the following activities:
- Working directly with client agencies and internal stakeholders to coordinate vulnerability and compliance scanning activities
- Partner with project coordinators and agency contacts to define scope, estimate timelines, schedule scans, and track progress
- Configure and troubleshoot Tenable One, Nessus, and TenableSC scans, scan jobs, scanners, and agents
- Support deployment of scanners and Nessus agents, including credential gathering, setup, and troubleshooting
- Apply compliance and audit content such as CIS Level 1 benchmarks and Palo Alto audit files
- Review scan results, explaining findings, and coordinating remediation and re-scans through closure
- Explain tool capabilities, scan limitations, and process requirements to agency stakeholders
- Set up and actively troubleshoot application scanning
- Work directly with application development teams when using scanning tools including TenableWAS, HCL AppScan and Qualys
- Coordinate with network and firewall teams to establish connectivity to devices and applications that require scanning
- Support monthly and ad hoc reporting, remediation tracking, exception management, and escalation of medium- and high-risk findings
- Use Linux and Microsoft command-line tools to configure scanners and Nessus agents as needed
- Address troubleshooting and basic IT tasks related to vulnerability management systems via ticketing in ServiceNow.