- Architect, deploy, and maintain Tenable.sc environment including Nessus scanners, agents, and connectors across IT and OT/ICS segments. - Manage scan policies, schedules, credentials, and scanner zones to maximize coverage - Integrate Tenable with CMDB, ticketing tools and SIEM platforms - Maintain scanner health, plugin updates, license compliance, and capacity planning; own upgrade and patch cycles. - Define and enforce the end-to-end vulnerability management process: discovery, identification, risk scoring, SLA assignment, remediation, verification, and exception handling. - Apply risk-based prioritization using CVSS, EPSS, VPR (Tenable Vulnerability Priority Rating), asset criticality, and threat intelligence feeds. - Drive remediation efforts by collaborating with system owners, publishing clear remediation guidance, and tracking SLA adherence in dashboards. - Develop, maintain, and review vulnerability management policy, standards, and procedures documentation. - Administration of NDR (Endpoint Detection and Response) Darktrace platform - Develop and manage NDR policies - Integration of NDR with SIEM and other Security tools - Fine‑tune NDR detection models, adjust sensitivity, and reduce false positives. - Monitor NDR appliance health, sensor connectivity and ensure continuous visibility across the network. - Apply NDR updates, manage configuration changes, and ensure alignment with security policies. - Manage day‑to‑day operations of the Threat Intelligence Platform (TIP), including data ingestion, enrichment, and workflow configuration - Configure and maintain integrations with threat‑intel feeds - Apply scoring models, enrichment rules, and prioritization logic to ensure high‑value intelligence is surfaced - Build and optimize automated workflows - Maintain integrations of TIP with SIEM, Security controls or other platforms. - 5–8 years of hands-on experience in information security with at least 4 years focused on vulnerability management - 3+ years of hands-on experience in administering Tenable SC is a must - Solid understanding of common vulnerability classes (OWASP Top 10, CWE Top 25, CVE ecosystem) and patch management workflows - Hands‑on experience in administration of NDR Darktrace is recommended - Hands‑on experience in administration of TIP is recommended
