Information System Security Engineer (Government)

Location: Chantilly, Virginia, United States. Full-time onsite role performed from the designated work location five days per week. No relocation is offered.

Salary: $158,200–$237,400 USD annual.

Company

Provides secure, IP-enabled, cloud-based network solutions and professional services to the Federal Government, including cybersecurity authorization support for public-sector programs.

What you will do

• Lead and continuously improve the enterprise vulnerability-management program using Tenable Security Center.
• Manage scan strategies, repositories, scanners, credentials, policies, schedules, asset inventories, dashboards, reporting, and platform integrations.
• Own the full vulnerability-management lifecycle, including asset onboarding, scanning, validation, prioritization, remediation tracking, exception management, retesting, and closure.
• Integrate Tenable findings with Xacta 360 and ServiceNow to support continuous monitoring, POA&M management, control evidence, risk tracking, and authorization reporting.
• Analyze vulnerability data, validate findings, identify coverage and credentialing gaps, distinguish false positives from actionable risk, and provide remediation guidance.
• Develop governance, procedures, metrics, dashboards, escalation paths, evidence requirements, and decision-ready reporting while partnering with infrastructure, security operations, application, compliance, system-owner, and government stakeholders.

Requirements

• Bachelor’s degree.
• Active CISSP certification.
• Public Trust clearance requirement.
• Ability to translate FISMA, NIST Risk Management Framework, NIST SP 800-53, agency requirements, and contractual obligations into security controls and vulnerability-management processes.
• Ability to apply technical knowledge of enterprise identity, servers, virtualization, logging, DNS/IP address management, and network technologies.
• Ability to exercise independent technical judgment, own processes, document clearly, communicate effectively, lead cross-functional activities, and escalate material risks and complex decisions.

Nice to have

• CSM, Security+, or CCNA certification.
• Advanced proficiency with Xacta 360 or comparable governance, risk, and compliance platforms.
• Hands-on experience with Tenable Security Center and enterprise vulnerability-management practices.
• Working knowledge of the ServiceNow ecosystem, including GRC and vulnerability management.
• Strong expertise in identity and access management.
• Experience with FEDRAMP and CMMC certification processes and deployment of certified cloud service offerings.
• Experience with Windows Server, Active Directory, Nutanix, CyberArk, SailPoint, Splunk, Infoblox, Cisco SD-WAN, NetFlow, and IPsec.

Culture & Benefits

• Regular full-time schedule of 40 hours per week in an onsite work environment.
• Medical, dental, and vision coverage, plus short- and long-term disability and life insurance.
• 401(k) plan, tuition reimbursement, and paid time off including at least 23 vacation days and 9 company-designated holidays.
• Paid parental leave, paid caregiver leave, adoption reimbursement, and additional sick leave that may be available.
• Wellness programs, employee assistance programs, supplemental benefit programs, and discounts on eligible services and products.