> Markdown version of [/jobs/ext/2713353-vulnerability-assessment-analyst-information-systems-security-engineer-isse](https://www.wearedevelopers.com/jobs/ext/2713353-vulnerability-assessment-analyst-information-systems-security-engineer-isse). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Vulnerability Assessment Analyst / Information Systems Security Engineer (ISSE) - **Company:** Omniscius Consulting - **Location:** Annapolis Junction, MD, United States - **Experience:** Expert - **Salary:** $100,000.0 - $245,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, CompTIA Security+, Cyber Security, System Configuration, Linux, Linux Security Modules, Software Vulnerability Management, Software Security, Tenable Nessus, Nessus, CIS Benchmarks, Vulnerability Analysis - **Published:** September 4, 2026 - **Apply:** https://www.careerjet.com/jobad/us360c188260478e105994b18965f45d48 ## About the Role * Active TS/SCI clearance with Full Scope Polygraph. * Hands-on experience with enterprise vulnerability management and scanning solutions such as Tenable Security Center, Tenable Nessus, and/or ACAS. * Familiarity with DISA STIGs, Tenable Audit Files, and/or CIS Benchmarks. * Knowledge of system and application security threats and vulnerabilities. * Working knowledge of: * Linux/Unix administration * Windows administration * Networking * Patch deployment * System configuration * Ability to analyze vulnerability scan results and support remediation efforts. Education & Experience Candidates must meet one of the following combinations: * High School Diploma/GED + 11 years of relevant experience, OR * Bachelor's Degree + 7 years of relevant experience. Certification Requirements * Must meet DoD 8570 IAT Level II requirements. * Acceptable certifications identified for the position include: * CompTIA Security+ CE * CEH Training alone is not acceptable as a substitute for the required CE certification. Preferred Qualifications * In-depth knowledge of vulnerability assessment methodologies, tools, and industry best practices. * Strong analytical and problem-solving skills with excellent attention to detail. * Self-starter capable of owning technical tasks from beginning to end. * Ability to work effectively both independently and as part of a technical team. * Strong written and verbal communication skills for presenting vulnerability findings and security risks to stakeholders. Security Requirements Candidates must possess an active TS/SCI clearance with Full Scope Polygraph and be able to operate as a privileged user within the supported environment. Powered by JazzHR ## Description Our client is seeking a Vulnerability Assessment Analyst / Information Systems Security Engineer (ISSE) to support vulnerability management and continuous monitoring activities in a highly secure environment. The position will focus heavily on Tenable Security Center, Nessus/ACAS vulnerability scanning, DISA STIG compliance, vulnerability remediation, and Windows/Linux security. The position is based at a contractor site in Annapolis Junction, Maryland, with a part-time evening and weekend schedule. Responsibilities * Maintain and optimize the Tenable Security Center infrastructure. * Perform security assessments, patching, and vulnerability scans of Linux Security Center servers using Tenable Nessus. * Identify and mitigate DISA STIG findings and vulnerabilities across Tenable Security Center and Windows/Linux Nessus scanning servers. * Install, configure, maintain, and update Tenable Nessus and Tenable Security Center software. * Configure and fine-tune vulnerability scanning policies and asset lists to ensure comprehensive coverage. * Conduct recurring vulnerability assessments across multiple device types and operating systems. * Use Nessus/ACAS to identify vulnerabilities across customer assets as part of continuous monitoring activities. * Review and analyze Nessus/ACAS scan results and provide remediation guidance. * Analyze vulnerability scan results and develop comprehensive reports. * Monitor and track vulnerability remediation activities through completion. * Coordinate with Information Systems Security personnel and other technical teams to ensure vulnerabilities are addressed in a timely manner. * Communicate security posture, vulnerabilities, and potential risks to technical and management stakeholders. * Maintain accurate documentation and records related to vulnerabilities and security incidents. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Maturity assessment for technicians or how I learned to love OWASP SAMM](https://www.wearedevelopers.com/videos/351-maturity-assessment-for-technicians-or-how-i-learned-to-love-owasp-samm) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)