Information Systems Security Engineer

Description

CenCore is seeking an Information Systems Security Engineer to support vulnerability management, compliance scanning, and security reporting across secure federal environments. This role configures, operates, and maintains Tenable.sc, Nessus, Splunk, and related tools to identify vulnerabilities, validate system hardening, and support remediation tracking. The position works closely with system administrators, ISSEs, customer resources, and program teams to improve security posture, support Risk Management Framework activities, and provide audit-ready vulnerability and compliance documentation. This role is located at Fort Meade, Maryland, may require after-hours response in a 24x7 environment, and may require duties outside the normal work location.

Key Responsibilities

• Configure, operate, and maintain Tenable.sc and Nessus to identify, track, and report vulnerabilities across supported environments.
• Troubleshoot vulnerability scans and coordinate with customer, system administration, ISSE, or program resources to resolve scan issues.
• Conduct Security Technical Implementation Guide compliance scans and interpret results to validate system hardening and control effectiveness.
• Analyze vulnerability data, trends, and risk indicators to create actionable findings and coordinate remediation efforts.
• Integrate vulnerability and compliance data into Splunk for correlation, trend analysis, and automated compliance reporting.
• Develop dashboards and reports that visualize system risk posture, vulnerability trends, and remediation progress.
• Support Risk Management Framework activities by providing technical input, vulnerability results, and evidence related to security controls.
• Assist in developing, refining, and maintaining scanning policies, baselines, and standard operating procedures.
• Support audits and assessments by providing vulnerability data, remediation evidence, and STIG compliance documentation.
• Test and evaluate configurations in a lab environment and provide security operations support as needed.