Scanning Engineer - Tenable

SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with operations across the U.S. We provide innovative enterprise-wide solutions as well as targeted services addressing the complex challenges faced by our federal government clients. Our focus is on enabling our clients to deliver their mission most efficiently and effectively – anytime, anywhere, securely. We combine technical expertise, mission awareness, and an empowered workforce to produce meaningful results.

Join the SkyePoint team and become part of a highly skilled, professional workforce dedicated to delivering mission-critical solutions. Our exceptional technical experts provide innovative services and solutions to federal agencies, making a meaningful impact every day. At SkyePoint, we value top talent and foster an environment where your ideas and contributions truly matter. Be part of a team that values excellence and rewards innovation—your future starts here!

This is a contingent position based upon customer approval.

SkyePoint Decisions is seeking a Scanning Engineer-Tenable to support the Diplomatic Security Cyber Mission (DSCM) program providing leading cyber and technology security experience to enable innovative, effective, and secure business processes. 

This position is located in Beltsville, MD and will be onsite 5 days a week. No hybrid/telework allowed. 

Responsibilities:

Vulnerability Scanning:

• Perform regular vulnerability scans across the Department's systems and networks, identifying deviations from acceptable configurations and standards.
• Evaluate and prioritize identified vulnerabilities based on potential impact and risk, and recommend remediation strategies and solutions.
• Collaborate with system owners and administrators to address identified vulnerabilities and ensure timely remediation.

Compliance Scanning:

• Execute enterprise-wide operating system and application compliance verification, assessing adherence to established security policies and best practices.
• Develop security baseline configuration compliance and vulnerability scan policies for Department hosted operating system platforms (e.g., Windows, UNIX, Linux, Cisco, Juniper, etc.).
• Prepare audit reports identifying technical and procedural findings, providing recommended remediation strategies and solutions.
• Perform security authorization audits using NIST Risk Management Framework (RMF), NIST Cybersecurity Framework, and FISMA reporting criteria for security control testing procedures, and create the associated Security Assessment Reports.

Web Application Scanning:

• Conduct web application vulnerability scanning to identify potential security risks and weaknesses in applications and services.
• Collaborate with web developers and application owners to address identified vulnerabilities and ensure the implementation of secure coding practices.
• Monitor emerging web application vulnerabilities and threats, and recommend appropriate mitigation strategies.

Database Scanning:

• Perform database vulnerability scanning to identify potential security risks and weaknesses in database management systems and configurations.
• Collaborate with database administrators to address identified vulnerabilities and ensure the implementation of secure database practices.
• Monitor emerging database vulnerabilities and threats, and recommend appropriate mitigation strategies.

Required Qualifications:

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field, and a minimum of 9 years of experience in enterprise scanning, vulnerability management, or cybersecurity.
  • An additional 4 years of experience may be substituted in lieu of degree.
• Must have experience using Tenable software suite to perform vulnerability scanning, discovery scans, and baseline compliance scoring (experience in running and administering Tenable.SC and/or Tenable.IO to be able to take on architecture and tool development tasks).
  
• Currently hold one of the professional certifications listed below:
  • CASP+ CE, CCNA Cyber Ops, CCNA-Security, CCNP Security, CEH, CFR, CISA, CISSP (or Associate), Cloud+, CySA+, GCED, GCIA, GCIH, GICSP, SCYBER, VCA DCV, PPDA, Agile IC, SNOW App Dev.
• In-depth knowledge of vulnerability, compliance, web application, and database scanning methodologies and best practices.
• Familiarity with various operating systems (Windows, UNIX, Linux, Cisco, Juniper, etc.).
• Demonstrated analytical and problem-solving skills, with the ability to identify and resolve complex security issues.
• Demonstrated excellent communication and interpersonal skills, with the ability to work collaboratively with cross functional teams.
• Must be a U.S. citizen.
• Active Secret security clearance.
  • Additional ability to obtain a final Top Secret clearance.

What We Can Offer You:

• At SkyePoint, we go B.I.G. (beginning in GRATITUDE) by recognizing all we have and giving back to our employees, families, and communities. It instills a positive mindset that permeates all we do. By beginning in gratitude, SkyePoint can continue to spread living in gratitude each day.
• Great Benefits: Several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, ST/LT Disability, Life Insurance, floating federal holiday options, and 401k matched
• Certificate Incentive Program: To promote professional development, we recognize and reward employees who obtain new certifications aligned with business needs.

• Flexible Work Environment

Compensation:

Salary Range: $120,000-$136,000

The SkyePoint Decisions salary range for this position is a general guideline only. It represents an estimated range for this position and is just one piece of our total compensation package. 

Salary at SkyePoint is determined by various factors, including but not limited to location, work schedule, the candidate’s combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability, market data and business considerations.

In addition to a competitive salary, SkyePoint offers benefits including a certification incentive program, PTO, floating federal holiday options, several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, Vision, ST/LT Disability, Life Insurance, and 401k matched.

SkyePoint Decisions is an established ISO 9001:2015 and ISO/IEC 27001:2013 certified small business and appraised at CMMI Level 3 for Services and Development. We possess a common vision of excellence and foster a collaborative team culture built upon individual performance and accountability. We invest in our people and systems to create value for our clients. It is the SkyePoint Way. We are grateful for the opportunity to work with exceptional people and give back to the communities we serve. Our employees value the flexibility at SkyePoint that allows them to balance quality work and their personal lives.

Please be aware of recruiting scams and people claiming to be from SkyePoint Decisions. For more information, please see the Welcome Page of our Careers site.

Skyepoint Decisions is a participating E-Verify Employer. 

U.S. Citizenship is required for most positions.

Equal Opportunity Employer/Veterans/Disabled.