Senior Vulnerability Management Consultant (Tenable Nessus)

A major federal public sector organization is widening the reach of its vulnerability management program. The mandate is to carry the Tenable Nessus architecture that underpins it, from design through in-service support, across an estate whose requirements differ from one network to the next.

What defines the mandate

• An engineering and advisory role, within a team that is taking over in-service support previously carried by another unit.
• Hybrid, in the National Capital Region: roughly three days a week on site, depending on the team's activities. Some of the environments involved cannot be reached remotely.
• Roughly nine months, full time, from the fall of 2026.

The scope

• The Tenable Nessus architecture as a whole: Tenable Core, Security Center, agent manager, active scanners, network monitor, Windows and Linux agents.
• The tuning of scan policies, where coverage and fidelity of results are won.
• Vulnerability analysis carried through to remediation: CVSS scoring, risk-based prioritization, root cause investigation, remediation guidance across endpoint, network and cloud.
• The integrations that give scan data its value: asset and configuration management, SIEM, security sensors, behaviour analytics, through vendor modules, native interfaces or scripting.
• The engineering documentation that keeps the solution alive after deployment: architectures, build documents, test plans and reports, standard operating procedures, continuity and recovery.
• Advice to security, infrastructure and application teams, and mentoring of less experienced analysts.

What is required

• Six years of cumulative hands-on experience in cybersecurity and vulnerability management, including Tenable Nessus platforms within an enterprise vulnerability management program.
• Over three years providing cybersecurity architecture advisory services, writing technical documentation and supporting cybersecurity solutions in classified or highly regulated environments (defence, financial institutions, critical infrastructure).
• Dated mandates, showing the role held, the period and the environment.
• The degrees, certifications and designations claimed, with supporting documents.

What sets an application apart

• Certifications on the platforms named above or in information security.
• Familiarity with government environments and the security frameworks that apply there.

The process

• Screening on the form answers and on the résumé.
• An interview with the client.
• Two professional references.
• Questions: staffing@intelliscient.com

Skills sought

• Tenable Nessus
• Tenable Security Center
• Nessus Network Monitor
• Nessus Agents
• CVSS
• SIEM
• UEBA
• Oracle Linux
• Elastic Stack
• SCCM
• Trellix
• NIST CSF