Closed listing
Cyber Security Engineer
- Ottawa, ON, Canada
Contract
This opening has closed.
The original listing is kept below for reference.
Job details
- Job type
- Contract
- Closing date
- Posting language
- English
- Posted
Similar jobs hiring now
Search current openingsOriginal job description
Archived listing. The details below describe a past opening.
Senior Vulnerability Management Engineer – Tenable Nessus
We are seeking a Senior Vulnerability Management Engineer with strong hands-on experience with Tenable Nessus and enterprise vulnerability management programs. The successful candidate will be responsible for designing, configuring, integrating, optimizing, deploying, and supporting vulnerability scanning capabilities across complex enterprise environments.
Key Responsibilities
- Design, configure, deploy, integrate, maintain, and upgrade Tenable Nessus vulnerability management solutions.
- Manage and optimize vulnerability scanning infrastructure, scan policies, scanners, agents, and related components.
- Conduct advanced vulnerability analysis using CVSS scoring and risk-based prioritization.
- Perform root-cause analysis and provide actionable remediation recommendations across network, endpoint, and cloud environments.
- Support the complete vulnerability management lifecycle, including scanning, analysis, remediation, validation, and reporting.
- Investigate and resolve complex and non-standard cybersecurity vulnerabilities and system issues.
- Improve scanning strategies, detection coverage, scan fidelity, and reduce false positives.
- Integrate Nessus with security and infrastructure technologies using APIs, vendor integrations, and custom scripting.
- Collaborate with Security Operations, Infrastructure, Application, and other technical teams to coordinate and drive vulnerability remediation.
- Develop and maintain technical architecture, implementation, configuration, testing, operational, and support documentation.
- Provide technical recommendations related to Nessus capabilities, modules, configuration options, upgrades, architecture, and enhancements.
- Identify opportunities to automate vulnerability-management tasks, workflows, and data replication.
- Provide technical guidance and mentoring to junior analysts and engineers.
- Maintain awareness of emerging vulnerabilities, threats, attack techniques, cybersecurity standards, and industry best practices.
Required Qualifications
- 6+ years of combined training and progressive hands-on experience in cybersecurity and vulnerability management.
- Significant hands-on experience with Tenable Nessus in an enterprise vulnerability management environment.
- Experience deploying, configuring, maintaining, and optimizing vulnerability scanning infrastructure.
- Experience developing and tuning vulnerability scan policies.
- Strong experience with CVSS, vulnerability analysis, risk-based prioritization, and remediation.
- Experience performing root-cause analysis and providing remediation guidance.
- Experience supporting vulnerability management across network, endpoint, and cloud environments.
- Strong understanding of the full vulnerability management lifecycle.
- Experience analyzing complex cybersecurity issues and designing or improving vulnerability management solutions.
- Experience working with security frameworks and standards such as NIST, DoD, or FedRAMP.
- Experience collaborating with Security Operations, Infrastructure, and Application teams.
- Strong technical documentation, communication, and problem-solving skills.
- Experience providing technical mentoring and guidance to junior team members.
Technical Environment
Experience with some or all of the following is highly relevant:
- Tenable Nessus
- Nessus Security Center
- Nessus Manager
- Nessus Active Scanner
- Nessus Agents – Windows/Linux
- Nessus Network Monitor / Passive Vulnerability Sensor
- SIEM technologies
- SCCM
- Elasticsearch / Logstash / Kibana (ELK)
- Rapid7 / Nexpose
- Asset, application, and configuration management tools
- Security APIs and custom scripting
- Endpoint security technologies
What We're Looking For
This role is best suited for a hands-on vulnerability management professional, not a general cybersecurity analyst. Candidates should be able to demonstrate substantial experience directly working with Tenable Nessus, enterprise vulnerability scanning, vulnerability analysis, remediation, and optimization.
More about this job
Responsibilities
The engineer will design, deploy, and optimize Tenable Nessus vulnerability management solutions across complex network, endpoint, and cloud environments. They will also conduct advanced vulnerability analysis, perform root-cause investigations, and collaborate with technical teams to drive remediation efforts.
Requirements
Candidates must have 6+ years of progressive experience in cybersecurity and vulnerability management with significant hands-on expertise in Tenable Nessus. Strong proficiency in vulnerability analysis, risk-based prioritization, and security frameworks like NIST or FedRAMP is required.
Skills
- Tenable Nessus
- Vulnerability Management
- CVSS
- Risk-based Prioritization
- Root-cause Analysis
- Network Security
- Cloud Security
- Endpoint Security
- Security Operations
- API Integration
- Scripting
- NIST
- DoD
- FedRAMP
- Technical Documentation
- Mentoring
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Engineering
- Consulting
- Government & Public Sector
Keywords
- Cyber Security
- Vulnerability Management
- Tenable Nessus
- Nessus Security Center
- Nessus Manager
- CVSS
- Risk-based Prioritization
- Root-cause Analysis
- Network Security
- Endpoint Security
- Cloud Security
- SIEM
- SCCM
- Elasticsearch
- Logstash
- Kibana
- Rapid7
- Nexpose
- API
- Scripting
- NIST
- DoD
- FedRAMP
- Security Operations
- Infrastructure
- Remediation
- Vulnerability Scanning
- Cybersecurity Standards
- Technical Architecture
- Automation