CenCore is seeking an Information Systems Security Engineer to support vulnerability management, compliance scanning, and security reporting across secure federal environments. This role configures, operates, and maintains Tenable.sc, Nessus, Splunk, and related tools to identify vulnerabilities, validate system hardening, and support remediation tracking. The position works closely with system administrators, ISSEs, customer resources, and program teams to improve security posture, support Risk Management Framework activities, and provide audit-ready vulnerability and compliance documentation. This role is located at Fort Meade, Maryland, may require after-hours response in a 24x7 environment, and may require duties outside the normal work location.
Key Responsibilities
- Configure, operate, and maintain Tenable.sc and Nessus to identify, track, and report vulnerabilities across supported environments.
- Troubleshoot vulnerability scans and coordinate with customer, system administration, ISSE, or program resources to resolve scan issues.
- Conduct Security Technical Implementation Guide compliance scans and interpret results to validate system hardening and control effectiveness.
- Analyze vulnerability data, trends, and risk indicators to create actionable findings and coordinate remediation efforts.
- Integrate vulnerability and compliance data into Splunk for correlation, trend analysis, and automated compliance reporting.
- Develop dashboards and reports that visualize system risk posture, vulnerability trends, and remediation progress.
- Support Risk Management Framework activities by providing technical input, vulnerability results, and evidence related to security controls.
- Assist in developing, refining, and maintaining scanning policies, baselines, and standard operating procedures.
- Support audits and assessments by providing vulnerability data, remediation evidence, and STIG compliance documentation.
- Test and evaluate configurations in a lab environment and provide security operations support as needed.
Required Qualifications
- Bachelor’s degree in Computer Science, Information Assurance, Information Security System Engineering, or a related discipline from an accredited college or university; or an associate degree in one of those disciplines and a technical certification such as Security+ plus two years of general IT experience; or a high school diploma/GED and four years of general IT experience, including at least one year of information systems security experience.
- Active DoD 8570.01-M compliance with Information Assurance Technical Level II, such as Security+, or Information Assurance Systems Architect and Engineer Level I, such as CASP or CISSP.
- Active TS/SCI clearance with full scope polygraph.
- Working knowledge of DoD Security Technical Implementation Guides and the Risk Management Framework process, including NIST 800-53.
- Knowledge of servers, virtualization, routers, switches, firewalls, VLANs, routing, and network segmentation.
- Experience using Splunk for data ingestion, search queries, correlation, and report creation.
- Ability to respond to after-hours requests as required in a 24x7 environment.
Preferred Qualifications
- Experience as an Information Systems Security Engineer on federal government programs or contracts of similar scope, type, and complexity.
- Experience implementing security vulnerability testing tools for continuous monitoring and patch verification.
- Experience supporting audits, assessments, remediation tracking, and compliance documentation in secure or regulated environments.
- Experience developing dashboards, reports, scanning baselines, scanning policies, or standard operating procedures.
- Experience coordinating remediation with system administrators, security engineers, customer stakeholders, or program teams.
Skills / Competencies
- Vulnerability management and compliance scanning.
- Tenable.sc, Nessus, and Splunk administration and reporting.
- STIG compliance analysis and security-control validation.
- Risk Management Framework support and technical documentation.
- Network, server, virtualization, and firewall concepts.
- Data analysis, dashboard development, and trend reporting.
- Clear communication, teamwork, and customer coordination.
- Results-oriented problem solving and self-directed follow-through.
Work Environment and Physical Requirements
This role supports secure information systems and security operations in a federal or mission-focused environment at Fort Meade, Maryland. The position may require after-hours response in a 24x7 environment and may require work outside the normal work location. Duties may include computer-based analysis, technical coordination, lab testing, reporting, and interaction with system administrators, ISSEs, customer resources, and program teams. Local travel may be required, but TDY travel is not currently indicated.