Security Specialist - Tenable

Mandatory Skills- Tenable Security center/Tenable SC, tenable One, Vulnerability Security,

Good to have-Linux

The Vulnerability Management Engineer Level 2 is responsible for the day-to-day operational execution of the organization s vulnerability management

activities.

The role operates and maintains vulnerability management platforms (e.g., Tenable Security Center, Tenable One or comparable solutions), schedules

and executes authenticated and unauthenticated scans, ensures onboarding of new assets into the scanning scope, and validates scan accuracy.

The engineer actively tracks remediation activities with system owners, enforces defined remediation SLAs, and ensures that vulnerabilities are properly

documented, re-tested, and closed. The position ensures continuous visibility of technical exposure and supports measurable risk reduction through

meaningful reporting and disciplined operational follow-up.

Key Responsibilities

Tenable Infrastructure Operation

Operate and maintain Tenable Security Center (Tenable SC), Tenable One, and Nessus scanners

Test and approve new Nessus Agent versions and Coordinate the rollout of them

Keep scan engines, plugins, policies, and agents up to date

Monitor connectivity, performance, and health

Ensure proper scanner coverage and health monitoring

Onboarding of New Systems

Deploy and troubleshoot Tenable Agents / Nessus Scanners / Nessu Managers

Configure servers/VMs for active scanning

Maintain scan templates and scanning policies

Assign systems to correct Asset Groups and Scan Policies

Execution and Monitoring of Vulnerability & Compliance Scans

Schedule and perform regular vulnerability and compliance scans

Monitor scan completion, accuracy, asset coverage, and scan errors

Troubleshoot scanning issues (credentials, firewall blocks, service problems, missing ports, etc.)

Analysis & Prioritization of Findings

Review, validate, and prioritize vulnerabilities

Use CVSS, exploitability, and asset criticality for risk-based classification

Provide clear, concise recommendations to European stakeholders

Remediation Tracking & Escalation

Proactively follow up with server owners and application teams

Track remediation progress and ensure timelines are met

Highlight overdue critical findings and escalate when needed

Support troubleshooting during patching or mitigation efforts

Communication & Reporting

Communicate professionally in English with European teams

Prepare vulnerability reports, dashboards, KPIs, and SLA overviews

Maintain documentation, runbooks, and operational procedures

Support internal audits and compliance requirements

Penetration Test Report Review & Integration

Review and interpret penetration test reports delivered by internal or external security teams

Validate the findings, assess their severity, and ensure they align with the organization s risk model

Translate penetration test findings into actionable remediation tasks for system owners

Follow up with responsible teams to ensure the identified weaknesses are addressed

Integrate penetration test results into the vulnerability management workflow and tracking tools

Provide summaries and clear explanations to stakeholders who may not have a security background

Required Knowledge

Hands-on experience in Vulnerability Management and IT Security

Strong understanding of CVE, CVSS, vulnerability types, and exploit mechanics

Strong practical knowledge of Tenable SC, Tenable One, and Nessus

Solid understanding of Windows and Linux server environments

Good knowledge of networking (ports, protocols, firewalls, routing)

Understanding of patching processes and change management

Familiarity with compliance scanning (CIS benchmarks, hardening standards)

Ability to understand common penetration testing techniques and methodologies (e.g., OWASP, MITRE ATT&CK)

Familiarity with typical attack vectors: privilege escalation, late"

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.