> Markdown version of [/jobs/ext/2522602-security-engineer-vulnerability-management-acas-tenable-sc-secret-clearance](https://www.wearedevelopers.com/jobs/ext/2522602-security-engineer-vulnerability-management-acas-tenable-sc-secret-clearance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer, Vulnerability Management (ACAS/Tenable.sc) - Secret clearance

- **Company:** THE PODMILSAK GROUP, INC.
- **Location:** Montgomery, AL, United States
- **Experience:** Expert
- **Salary:** $130,000.0 - $160,000.0
- **Contract:** Temporary contract
- **Skills:** Microsoft Windows, Computing Platforms, Cloud Computing, CompTIA Security+, Linux System Administration, Software Vulnerability Management, SC Clearance, Nessus, Vulnerability Analysis
- **Published:** August 10, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=6f7e3fea16cc8695

## About the Role

* 5+ years of experience in vulnerability management, information assurance, or systems security, preferably within a DoD or federal environment.
 * Hands-on experience administering Tenable.sc, Nessus, and ACAS in a DoD or federal environment.
 * Working knowledge of DoD STIGs, CKLs, and RMF processes.
 * Strong Windows and Linux administration experience.
 * Active DoD Secret clearance required; clearance must be current and verifiable.
 * DoD 8570/8140 IAT Level II baseline certification required, such as:
*

 + CompTIA Security+ CE
 + CySA+
 + GSEC
 + SSCP
 + CCNA-Security
 * Strong written and verbal communication skills with the ability to collaborate effectively across technical teams.

## Description

PGTEK is seeking a Security Engineer, Vulnerability Management with a Secret clearance (or higher) to administer and optimize our Tenable.sc/ACAS environment, drive vulnerability remediation across enterprise systems, and support compliance with DoD STIG and RMF requirements., This is a hands-on role that combines deep Tenable platform expertise with Windows/Linux administration, vulnerability analysis, system hardening, and cross-team collaboration. The ideal candidate will have experience working in a DoD or federal environment and be comfortable managing vulnerability scanning and remediation across complex enterprise environments.
Key ResponsibilitiesTenable Security Center / ACAS

 * Administer and optimize Tenable.sc and Nessus, including scan policies, scan zones, repositories, credentials, and audit files.
 * Perform credentialed vulnerability scans, STIG compliance scans, discovery scans, and port scans.
 * Analyze and interpret STIGs, CKLs, ACAS/Tenable findings, and vulnerability results to support compliance and risk reduction.
 * Leverage Windows and Linux administration skills to support and troubleshoot authenticated vulnerability scanning.
 * Conduct false-positive analysis and validation to ensure accurate vulnerability reporting.
 * Collaborate with Cloud, Network, Platform, Security, and Engineering teams to drive vulnerability remediation and system hardening.

Vulnerability Coverage & Asset Discovery

 * Identify and close gaps in vulnerability scan coverage to ensure comprehensive visibility across the environment.
 * Perform asset discovery and maintain accurate inventories to ensure all in-scope systems are included in scanning cycles.
 * Analyze scan results to identify coverage gaps, unscanned assets, and compliance blind spots.
 * Recommend corrective actions to improve vulnerability visibility, scanning effectiveness, and overall security posture


## Related Videos

- [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [WebAssembly: The Next Frontier of Cloud Computing](https://www.wearedevelopers.com/videos/972-webassembly-the-next-frontier-of-cloud-computing)
- [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba)
- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)
- [Leverage Cloud Computing Benefits with Serverless Multi-Cloud ML ](https://www.wearedevelopers.com/videos/78-leverage-cloud-computing-benefits-with-serverless-multi-cloud-ml)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)