> Markdown version of [/jobs/ext/2610410-security-engineer-vulnerability-management-acas-tenable-sc-secret-clearance](https://www.wearedevelopers.com/jobs/ext/2610410-security-engineer-vulnerability-management-acas-tenable-sc-secret-clearance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer, Vulnerability Management (ACAS/Tenable.sc) - Secret clearance

- **Company:** THE PODMILSAK GROUP, INC.
- **Location:** Ogden, UT, United States
- **Experience:** Expert
- **Salary:** $130,000.0 - $160,000.0
- **Contract:** Temporary to permanent
- **Skills:** Microsoft Windows, Computing Platforms, Cloud Computing, CompTIA Security+, Linux System Administration, Cloud Services, Software Vulnerability Management, SC Clearance, Nessus, Devsecops, Vulnerability Analysis, Vmware
- **Published:** August 10, 2026
- **Apply:** https://www.careerjet.com/jobad/us9c2b8f423cf9a17736e4cc64a2893a77

## About the Role

This is a hands-on role that combines deep Tenable platform expertise with Windows/Linux administration, vulnerability analysis, system hardening, and cross-team collaboration. The ideal candidate will have experience working in a DoD or federal environment and be comfortable managing vulnerability scanning and remediation across complex enterprise environments., * 5+ years of experience in vulnerability management, information assurance, or systems security, preferably within a DoD or federal environment.

 * Hands-on experience administering Tenable.sc, Nessus, and ACAS in a DoD or federal environment.
 * Working knowledge of DoD STIGs, CKLs, and RMF processes.
 * Strong Windows and Linux administration experience.
 * Active DoD Secret clearance required; clearance must be current and verifiable.
 * DoD 8570/8140 IAT Level II baseline certification required, such as:

 * CompTIA Security+ CE
 * CySA+
 * GSEC
 * SSCP
 * CCNA-Security
 * Strong written and verbal communication skills with the ability to collaborate effectively across technical teams.

## Description

PGTEK is seeking a Security Engineer, Vulnerability Management with a Secret clearance (or higher) to administer and optimize our Tenable.sc/ACAS environment, drive vulnerability remediation across enterprise systems, and support compliance with DoD STIG and RMF requirements., Tenable Security Center / ACAS

 * Administer and optimize Tenable.sc and Nessus, including scan policies, scan zones, repositories, credentials, and audit files.
 * Perform credentialed vulnerability scans, STIG compliance scans, discovery scans, and port scans.
 * Analyze and interpret STIGs, CKLs, ACAS/Tenable findings, and vulnerability results to support compliance and risk reduction.
 * Leverage Windows and Linux administration skills to support and troubleshoot authenticated vulnerability scanning.
 * Conduct false-positive analysis and validation to ensure accurate vulnerability reporting.
 * Collaborate with Cloud, Network, Platform, Security, and Engineering teams to drive vulnerability remediation and system hardening.

Vulnerability Coverage & Asset Discovery

 * Identify and close gaps in vulnerability scan coverage to ensure comprehensive visibility across the environment.
 * Perform asset discovery and maintain accurate inventories to ensure all in-scope systems are included in scanning cycles.
 * Analyze scan results to identify coverage gaps, unscanned assets, and compliance blind spots.
 * Recommend corrective actions to improve vulnerability visibility, scanning effectiveness, and overall security posture, We are seeking an experienced Secret-cleared Cloud Services Engineer with deep expertise in VMware NSX-T to design, implement, and operate secure, scalable infrastructure across hy…
 + 1 month ago
 + Apply easily, Role : DevOps Security Engineer ( US citizen) Location : Ogden, UTAH ( 100% Onsite role., NO REMOTE !! ) *** MUST relocate off their own to Ogden, Utah, if not local to that ar…
 + 1 month ago
+


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [WebAssembly: The Next Frontier of Cloud Computing](https://www.wearedevelopers.com/videos/972-webassembly-the-next-frontier-of-cloud-computing)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)
- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)
- [Generating code with Angular schematics](https://www.wearedevelopers.com/videos/129-generating-code-with-angular-schematics)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)