Tenable 工程师
Tenable Engineer
这是一个远程职位。
加入信息科技(IT)系统工程团队,为美国空军部(DAF)企业信息技术即服务(EITaaS)提供支持。作为ACAS工程解决和现代化团队的一员,您将负责在企业级生产环境中排查和解决工程问题,并支持为DAF构建、改进和维护新的Tenable架构。作为Tenable工程师,您将与工程解决主管工程师、ACAS解决方案架构师、首席架构师和首席工程师合作,开发和排查ACAS解决方案,向ACAS项目经理汇报。
职责:
- 负责在DAF的生产ACAS环境中排查和解决工程问题。
- 进行排查,编写标准操作流程(SOP),并与团队成员协作识别问题并制定相应的解决策略以处理工单。
- 执行以下工程排查以解决工单:漏洞修复、插件/协议错误、凭据/防火墙问题、服务证书问题、补丁管理、数据源排查以及其他在EITaaS和DAF环境中出现的问题。
- 负责ACAS环境的健康状况,包括但不限于Nessus、Nessus Manager、Nessus Agents、日志关联引擎、Nessus网络监视器以及在Linux/Unix和Windows环境中的安全中心。
- 确保符合组织的安全政策和行业最佳实践。
- 尽可能制定并实施策略以减少未来的工程问题。
- 与跨职能团队协作,解决根本原因并实施补救计划。
- 至少每两天在ServiceNow中记录和报告工单状态。
- 开发、改进和维护Tenable保证合规性评估解决方案(ACAS),重点关注以下技术领域:Azure云、Red Hat Linux、ACAS的Tenable软件解决方案、脚本(Python、PowerShell及其他必要语言)。
- 开发并实施现有流程和实践的改进。
- 开发自动化脚本和代码效率。
- 具有云技术和服务的经验,例如AWS、Azure和/或Google Cloud。
年度绩效目标
- 通过所有部门的...
查看英文原文
This is a remote position.
Join alongside an Information Technology (IT) Systems Engineering team supporting the Department of the Air Force (DAF) Enterprise Information Technology as a Service (EITaaS). As part of the ACAS Engineering Resolution and Modernization Teams, you will be responsible for troubleshooting and resolving engineering issues in an enterprise-level, production environment, as well as supporting the build, improvement, and maintenance of a new Tenable architecture for the DAF. As the Tenable Engineer, you will work with the Engineering Resolution Lead Engineer, ACAS Solution Architect, Chief Architect, and Chief Engineer to develop and troubleshoot the ACAS Solution, reporting to the ACAS Project Manager.
Responsibilities:
- Responsible for the troubleshooting and resolution of engineering issues within the production ACAS environment for the DAF.
- Perform troubleshooting, document SOPs, and collaborate with team members on issue identification and their associated resolution strategies to resolve tickets.
- Perform the following engineering troubleshooting to resolve tickets: vulnerability remediation, plug ins/protocol errors, credentials/firewall issues, service certificate issues, patching, data feed troubleshooting, and other issues within the EITaaS and DAF environment as they arise.
- Responsible for the health of the ACAS environment, to include but not limited to Nessus, Nessus Manager, Nessus Agents, Log Correlation Engine, Nessus Network Monitor, and Security Center on both Linux/Unix and Windows based environments.
- Ensure compliance with organizational security policies and industry best practices
- Develop and implement strategies to reduce future engineering issues whenever possible.
- Collaborate with cross-functional teams to address root cause findings and implement remediation plans
- Document and report on ticket statuses, at a minimum, every other day in ServiceNow.
- Develop, improve, and maintain the Tenable Assured Compliance Assessment Solution (ACAS) with a focus in the following technology areas: Azure Cloud, Red Hat Linux, Tenable Software Solutions for ACAS, Scripting (Python, PowerShell, other languages as necessary)
- Develop and implement improvements to existing processes and practices
- Develop automation scripts and code efficiencies
- Experience with Cloud technologies and services, e.g. AWS, Azure, and/or Google Cloud.
Annual Performance Objectives
- Passed all Department of the Air Force internal Gate Reviews without rejection
- All active ENG queue tickets updated at a minimum every 2 days
- Ability to white-board the solution ad-hoc with the project team without the need to reference existing solution materials
- Implement an identified process improvement per quarter
Qualifications:
Required:
- Must have an active a Secret security clearance
- 10+ Years of relevant experience (Bachelor’s Degree in applicable field may be substituted for 5 years of experience).
- 7 Years of Experience with ACAS Solutions; Tenable preferred with a minimum of 5 years of direct experience
- 3 Years of Experience deploying, automating, and hardening Red Hat Linux Operating Systems
- 1 years of experience supporting the Department of Defense
- Excellent communication skills with experience briefing internal project team members and DAF stakeholders
- One of the following Certifications: · CISSP or equivalent DoD 8140 Certification Compliance
Originally posted on Himalayas