Senior Cybersecurity Engineer – Vulnerability & Security Monitoring

• Must have an active Q Clearance or a Top Secret Clearance that can be transferred.
• Must be able to work 100% on-site in Oak Ridge, TN.

Senior Cybersecurity Engineer – Vulnerability & Security Monitoring

• Vuln management
• Administer and support the enterprise vulnerability management program through Tenable Security Center, including scan policy configuration, scanner administration, scheduling, credential management, operational support, and results reporting.
• Perform detailed analysis of vulnerability scan data across large and diverse computing environments to validate findings, assess severity, prioritize remediation, and support risk-informed decision-making.
• Troubleshoot scanner performance issues, failed scans, and detection anomalies
• Engage directly with vendors, including Tenable, to investigate inaccurate findings, troubleshoot plugin-related issues, and validate corrective actions or product updates.

1. Logging

1. Administer and support enterprise SIEM systems.

2. Configure event logging collectors, processing pipelines, and indexing systems.

3. Create and maintain ETL (extract, transform, load) systems for event ingestion.

4. Coordinate with system owners to ensure NIST 800-53 AU control compliance across multiple classified enclaves.

5. Identify logging opportunities and implement solutions to support threat hunting and incident response activities.

• Coordinate with vendors as necessary to resolve tool-related issues.
• Prepare assessments, status reports, and briefings for management and other stakeholders as well as present technical information and risk-based recommendations clearly to audiences with varying levels of cybersecurity knowledge.
• Collaborate with cybersecurity personnel, networking teams, infrastructure and data center operations, security operations, and research staff to support the effective implementation, integration, and continuous improvement of security technologies and processes.
• Standardize, maintain, and automate web application, vulnerability management, and cybersecurity operational processes to support monitoring, analysis, reporting, and response activities.
• Support broader cybersecurity operations, including incident response, malicious activity analysis, protective actions, and remediation efforts across classified and unclassified environments, as assigned.