The ideal candidate will possess strong expertise in Tenable architecture design, administration, scanner management, vulnerability assessment, and reporting, along with working knowledge of automation and scripting to streamline security operations.
Key Responsibilities
Tenable Architecture & Design
- Design, implement, and maintain Tenable architecture across enterprise environments.
- Plan and deploy Tenable components including Security Center, Nessus Managers, and Nessus Scanners.
- Ensure high availability, scalability, and performance of the Tenable infrastructure.
- Define scanning strategies and architecture for on-premises, cloud, and hybrid environments.
- Evaluate and recommend best practices for vulnerability management programs.
Tenable Administration
- Administer and manage Tenable Security Center / Tenable Vulnerability Management platforms.
- Configure and maintain scanners, scan zones, repositories, and scan policies.
- Manage platform upgrades, plugin updates, patches, and system health monitoring.
- Create and manage user accounts, roles, permissions, and access controls.
- Troubleshoot scan failures, connectivity issues, and performance bottlenecks.
- Generate scheduled and ad-hoc vulnerability reports and dashboards.
Vulnerability Management
- Perform vulnerability assessments and analyze scan results.
- Prioritize vulnerabilities using CVSS scores and risk-based methodologies.
- Work with infrastructure and application teams to drive remediation activities.
- Track remediation progress and validate closure of vulnerabilities.
- Support audit, compliance, and security governance requirements.
Automation & Scripting
- Develop and maintain scripts to automate routine Tenable administration tasks.
- Utilize APIs to extract vulnerability data and automate reporting processes.
- Create scripts for scanner deployment, health checks, and operational monitoring.
- Support integration with ticketing, SIEM, and reporting platforms.
Integration & Collaboration
- Integrate Tenable solutions with platforms such as ServiceNow, Splunk, Microsoft Sentinel, and cloud services.
- Collaborate with security, infrastructure, and application teams to improve vulnerability management processes.
- Provide technical guidance and support during security assessments and audits.