Tenable Architect

The ideal candidate will possess strong expertise in Tenable architecture design, administration, scanner management, vulnerability assessment, and reporting, along with working knowledge of automation and scripting to streamline security operations. Key responsibilities include designing, implementing, and maintaining Tenable architecture across enterprise environments; planning and deploying Tenable components including Security Center, Nessus Managers, and Nessus Scanners; ensuring high availability, scalability, and performance of the Tenable infrastructure; defining scanning strategies and architecture for on-premises, cloud, and hybrid environments; evaluating and recommending best practices for vulnerability management programs.

Additionally, the role involves administering and managing Tenable Security Center / Tenable Vulnerability Management platforms, configuring and maintaining scanners, scan zones, repositories, and scan policies, managing platform upgrades, plugin updates, patches, and system health monitoring, creating and managing user accounts, roles, permissions, and access controls, troubleshooting scan failures, connectivity issues, and performance bottlenecks, and generating scheduled and ad-hoc vulnerability reports and dashboards.

For vulnerability management, the candidate will perform vulnerability assessments, analyze scan results, prioritize vulnerabilities using CVSS scores and risk-based methodologies, work with infrastructure and application teams to drive remediation, track remediation progress, and support audit and compliance requirements. The role also includes developing and maintaining scripts to automate routine tasks, utilizing APIs for data extraction and reporting, creating scripts for scanner deployment and monitoring, and integrating with ticketing, SIEM, and reporting platforms.

Integration and collaboration involves integrating Tenable with ServiceNow, Splunk, Microsoft Sentinel, and cloud services, collaborating with security, infrastructure, and application teams, and providing technical guidance during assessments and audits. Required skills include strong knowledge of Tenable Security Center, Tenable.io/Tenable Vulnerability Management, and Nessus; experience with vulnerability management lifecycle and remediation workflows; understanding of security concepts, network architecture, and risk management; hands-on experience with scanner deployment, configuration, and troubleshooting; knowledge of CVE, CVSS, CIS Benchmarks, and security compliance frameworks.

Scripting skills require basic to intermediate knowledge of Python, PowerShell, Bash/Shell scripting, experience with REST APIs and JSON data, and ability to automate reporting and administrative tasks. Cloud and integration experience includes exposure to AWS, Azure, or GCP environments and integration with ServiceNow, SIEM solutions, Active Directory, and ticketing platforms. Preferred qualifications include a Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, and relevant industry certifications such as Tenable Certified Professional (TCP), Security+, CEH, CISSP (Preferred), and Azure/AWS Security Certifications.