About Careertakes

👉 Important disclosure: Careertakes is a third-party recruiting platform supporting this hiring process. If selected, you will be employed directly by our client, IT.

Applicants for this role may also receive access to additional matched opportunities through the Careertakes platform.

---

What You’ll Do

This role supports vulnerability management, compliance scanning, and RMF activities for enterprise and DoD-aligned environments. Responsibilities include:

• Configure, operate, and maintain Tenable.sc and Nessus to identify and track vulnerabilities across environments
• Troubleshoot and resolve scanning issues; coordinate with program or customer resources as needed
• Conduct STIG compliance scans and interpret results to validate system hardening and control effectiveness
• Analyze vulnerability data and trends; create actionable findings and coordinate remediation with system administrators and ISSEs
• Integrate vulnerability and compliance data into Splunk for correlation, trend analysis, and automated compliance reporting
• Develop dashboards and reports to visualize system risk posture and track remediation progress
• Support RMF activities by providing technical input for security controls using vulnerability and compliance evidence
• Assist in developing or refining scanning policies, baselines, and SOPs to improve security posture and consistency
• Support audits and assessments by providing detailed vulnerability data, remediation evidence, and STIG compliance documentation
• Implement continuous vulnerability monitoring and patch verification tooling and processes
• Test and evaluate configurations in lab environments
• Provide security operations support and respond to after-hours requests when required in a 24x7 environment

---

Minimum Qualifications

• Active and current TS/SCI with FSP through MD (required)
• Active DoD 8570.01-M compliance with Information Assurance Technical (IAT) Level II (e.g., Security+) OR equivalent
• IASAE Level 1 (CASP or CISSP) is required
• Bachelor’s degree in Computer Science, Information Assurance, Information Security System Engineering, or related discipline from an accredited institution (required)
• Working knowledge of DoD STIGs and RMF (NIST SP 800-53)
• Experience using Splunk for data ingestion, searches, correlation, and reporting
• Familiarity with servers, virtualization, routers, switches, firewalls, VLANs, routing, and network segmentation
• Strong communication and teamwork skills; results‑oriented, self-motivated

---

Preferred / Nice-to-Have

• Prior experience as an ISSE on federal programs or contracts of similar scope and complexity
• Hands-on experience building dashboards and automated reporting for vulnerability management
• Lab experience validating configurations and patch verification tools

---

Education & Experience Paths

• Associate’s degree in a relevant technical field plus a technical certification (e.g., Security+) and 2 years general IT experience; OR
• High school diploma/GED plus 4 years general IT experience, with at least 1 year of information systems security experience

---

Compensation

• Salary range: $83,279 – $88,939 per year (as provided)

---

Additional Notes & Compliance

• This role requires an active security clearance as noted above. Employment is contingent on clearance verification and any required background checks.
• Careertakes and our client comply with all federal, state, and local hiring laws. Reasonable accommodations are available for applicants with disabilities; please request accommodations during the recruiting process.
• Confidential Client is an equal opportunity employer. We evaluate candidates on merit without regard to protected characteristics.

---

Equal Opportunity & Hiring Transparency

Careertakes and our client are Equal Opportunity Employers committed to building a diverse and inclusive workforce. We prohibit discrimination or harassment of any kind. To support a fair and efficient hiring process, AI tools may be used to assist with application review or resume screening. These tools do not replace human decision-making. Final hiring decisions are made by people.

If you have questions about how your data is used, please contact us directly.