) Nessus Vulnerability Management Administrator
Headline Description
Nessus Administrator (or Tenable Security Administrator) is responsible for managing, configuring, and maintaining Tenable Nessus, Nessus Manager, Agents, and Security Center (ACAS). Conduct vulnerability assessments, develop scan policies, analyze results to identify security risks, and generate reports for stakeholders to ensure compliance and remediation.
Key Responsibilities
System Maintenance: Install, configure, and maintain Nessus scanners, agents, and Security Center on Linux/Windows environments.
Vulnerability Scanning: Develop, schedule, and optimize scan policies to identify system weaknesses.
Risk Management: Analyze, validate, and report on vulnerability scan results, prioritizing remediation efforts.
Access Control: Manage user access, permissions, and roles within the Tenable environment.
Integration: Integrate Tenable products with directory services like Active Directory or LDAP.
Required Skills and Qualifications
Technical Proficiency: Deep knowledge of Nessus, Tenable Security Center, Nessus Agents, and network/system security.
Operating Systems: Knowledge of managing Linux/Unix and Windows environments.
Analytical Skills: Strong ability to interpret scan data, troubleshoot issues, and identify remediation strategies.
Experience: Usually requires 3–15+ years of relevant experience in cybersecurity or system administration.
Typical Qualifications
Bachelor’s degree in Computer Science or related field (or equivalent experience).
Day-to-day activities
Responsible for : -
- installing and configuring Nessus Agents
- the creation of Tenable Organizations, Repositories, and Scan Zones
- local and LDAP based user management
- configuring Tenable plugins/feeds and adding audit files
- licensing the product both online and offline
- adding scan policies, audit policies, and credentials to Security Center and Nessus Manager
- configuring Nessus Manager scan pulls to Security Center
- importing and adding dashboards
- maintaining scan policies and audit policies
- adding scan credentials
- Scheduling scans
- Generating Scan Reports
- the Analysis and validation of the scan results
- Monitoring the dashboards
- defining and configuring dashboards
- Measuring and reporting overall availability
