2

Remote Nessus Jobs in Virginia (NOW HIRING)

Conduct self-assessments using ACAS (Nessus) and SCAP Compliance Checker (SCC) to identify ... Work is typically based in a remote working environment and subject to frequent interruptions.

Conduct self-assessments using ACAS (Nessus) and SCAP Compliance Checker (SCC) to identify ... Work is typically based in a remote working environment and subject to frequent interruptions.

FTE + Benefits Remote: 80% (4 days a week) Supports the FedRAMP and FISMA authorization(s) of new ... Nessus/Security Center, WebInspect, etc. * Familiarity with Splunk to execute queries, search ...

FTE + Benefits Remote: 80% (4 days a week) Client supports the FedRAMP and FISMA authorization(s ... Nessus/Security Center, WebInspect, etc. * Familiarity with Splunk to execute queries, search ...

FTE + Benefits Remote: 80% (4 days a week) Supports the FedRAMP and FISMA authorization(s) of new ... Nessus/Security Center, WebInspect, etc. * Familiarity with Splunk to execute queries, search ...

FTE + Benefits Remote: 80% (4 days a week) Client supports the FedRAMP and FISMA authorization(s ... Nessus/Security Center, WebInspect, etc. * Familiarity with Splunk to execute queries, search ...

Cloud Infrastructure Engineer

Mclean, VA · On-site +1

$128K - $145K/yr

Experience with tools such as Splunk, Nessus, or similar * Exposure to identity systems (Active ... AWS certifications or relevant technical certifications Work Environment This is a fully remote ...

Cloud Infrastructure Engineer

Mclean, VA · Remote

$56.25 - $75.25/hr

Experience with tools such as Splunk, Nessus, or similar * Exposure to identity systems (Active ... AWS certifications or relevant technical certifications Work Environment This is a fully remote ...

Herndon, VA 20171 (Remote) Employment Type: FTE + Benefits Client is supporting the FedRAMP and ... Nessus/Security Center , WebInspect, etc. * Familiarity with Splunk to execute queries, search ...

next page

Showing results 1-20

Remote Nessus information

What is a remote Nessus?

A Remote Nessus job typically involves using the Nessus vulnerability scanner to identify and assess security risks in network systems, all while working from a remote location. Professionals in this role configure and run Nessus scans, analyze the resulting reports, and provide recommendations to remediate discovered vulnerabilities. This position is crucial for organizations looking to maintain strong cybersecurity without requiring on-site staff, and often involves collaborating with IT and security teams virtually.

What are some common challenges faced when working as a remote Nessus vulnerability analyst, and how can they be overcome?

One common challenge in a Remote Nessus Vulnerability Analyst role is ensuring secure and reliable access to client networks and assets, as remote work often requires strict adherence to security protocols and may involve troubleshooting connectivity issues. Additionally, clear communication with IT teams and stakeholders can be more complex when working offsite, making it important to utilize collaboration tools and maintain regular updates. Staying current with vulnerability trends and Nessus updates is also essential for accurate assessments. Building a routine for documentation and proactive engagement with security teams can help mitigate these challenges and contribute to successful outcomes.

What are the key skills and qualifications needed to thrive as a remote Nessus security analyst, and why are they important?

To thrive as a Remote Nessus Security Analyst, you need a strong understanding of network security, vulnerability assessment, and experience with security protocols, often backed by a degree in cybersecurity or related certifications like CompTIA Security+ or CEH. Expertise in using Nessus vulnerability scanner, familiarity with other security tools, and knowledge of operating systems and network infrastructure are typically required. Analytical thinking, attention to detail, and clear written communication are crucial soft skills for interpreting scan results and collaborating with remote teams. These skills are essential for identifying security risks, ensuring compliance, and maintaining robust protection for organizational networks.

What is the difference between Remote Nessus vs Remote Vulnerability Analyst?

AspectRemote NessusRemote Vulnerability Analyst
CertificationsSecurity+, CEH, CISSP (optional)Security+, CISSP, GIAC certifications
Work EnvironmentCybersecurity teams, security tools managementSecurity teams, risk assessment, vulnerability analysis
Industry UsageIT security, vulnerability scanningCybersecurity, risk management
Primary FocusRunning vulnerability scans with NessusAnalyzing vulnerabilities, reporting, mitigation

Remote Nessus professionals focus on conducting vulnerability scans using Nessus tools, while Remote Vulnerability Analysts analyze scan results, assess risks, and recommend security improvements. Both roles require cybersecurity knowledge, but their daily tasks differ in scope and responsibilities.

What cities in Virginia are hiring for Remote Nessus jobs?

Cities in Virginia with the most Remote Nessus job openings:

(715) Cybersecurity Analyst (Part-Time)

Arlo Solutions LLC

Arlington, VA • On-site, Remote

Part-time

Posted 8 days ago


Job description

Position Description:

Arlo Solutions is seeking an experienced Part-time Cybersecurity Analyst to support the Defense Support of Civil Authorities (DSCA) cybersecurity mission. The Cybersecurity Analyst serves as a trusted cybersecurity advisor responsible for supporting Risk Management Framework (RMF) activities, cybersecurity engineering, security assessments, continuous monitoring, vulnerability management, compliance validation, and enterprise cyber risk management across multiple Department of Defense information systems. The successful candidate will work closely with Government Authorizing Officials (AOs), Security Control Assessors (SCAs), Information System Security Managers (ISSMs), Information System Security Officers (ISSOs), Program Managers, engineers, and mission owners to ensure systems remain compliant with DoD cybersecurity policies while enabling mission execution. This position requires strong analytical skills, technical cybersecurity knowledge, excellent communication abilities, and experience supporting DoD Assessment & Authorization (A&A) activities.


Location: 
Remote or (Hybrid - Arlington, VA)


Clearance:  Active Secret Clearance
Responsibilities and/or Success Factors:

Cybersecurity Governance Support implementation of the DoD Risk Management Framework (RMF) lifecycle:

  • Assist Government ISSMs with maintaining cybersecurity authorization packages.
  • Review and analyze cybersecurity documentation for completeness and compliance.
  • Perform cybersecurity policy research and interpretation.
  • Develop recommendations to reduce organizational cyber risk. 
  • Assist with cybersecurity governance boards and risk review meetings.
  • Support cybersecurity strategy development.
  • Assist leadership with enterprise cybersecurity initiatives.

Risk Management Framework (RMF) Support all six RMF Steps:

  • Prepare Categorize Select Implement Assess Authorize Monitor Responsibilities include:
  • Security Plans (SSPs)
  • Security Assessment Plans (SAPs)
  • Security Assessment Reports (SARs)
  • Risk Assessment Reports (RARs)
  • POA&M development Security Categorization Control inheritance analysis Reciprocity reviews
  • Continuous Authorization activities Authorization package quality reviews

Cybersecurity Assessments Conduct or support:

  • Security Control Assessments (SCA)
  • Cybersecurity Readiness Assessments
  • Gap Assessments Compliance
  • Reviews Risk Assessments
  • Technical Control Validation
  • Architecture Reviews
  • Cloud Security Reviews
  • Zero Trust Assessments
  • Assist in validating implementation of NIST SP 800-53 Rev. 5 security controls.

Continuous Monitoring Support Enterprise Continuous Monitoring (ConMon) activities including:

  • POA&M tracking
  • Vulnerability trend analysis
  • Configuration management reviews
  • Security control effectiveness reviews
  • Monthly cybersecurity status reporting
  • Audit log reviews
  • Incident trend analysis
  • Compliance metrics
  • Risk dashboards
  • Vulnerability Management Review
  • ACAS/Nessus scan results.
  • Analyze STIG compliance.
  • Validate vulnerability remediation.
  • Track critical findings.
  • Perform risk prioritization.
  • Coordinate remediation activities.
  • Develop mitigation recommendations.
  • Support cybersecurity inspections.

Documentation Develop and maintain:

  • SSPs SAPs SARs RARs POA&Ms
  • Configuration Management Plans
  • Continuous Monitoring Strategies
  • Security Engineering documentation
  • Architecture Diagrams
  • Data Flow Diagrams
  • Standard Operating Procedures
  • Cybersecurity Briefings Executive Reports


Minimum Qualifications Including Certificates:

  • Active DoD Secret Clearance.
  • Bachelor's degree in Cybersecurity, Computer Science, Information Assurance, Information Systems, Engineering, or related discipline. 
  • (5) Five or more years supporting DoD cybersecurity programs.
  • Experience implementing DoD RMF.
  • Experience with NIST SP 800-53 Rev. 5.
  • Experience supporting ATO/IATT/ATO-C activities.
  • Experience writing RMF artifacts.
  • Experience conducting security control validation.
  • Experience supporting vulnerability management.
  • Experience with STIG implementation.
  • Experience with ACAS/Nessus.
  • Strong written and verbal communication skills.
  • Ability to brief senior Government leadership. 


Desired Qualifications:

  • CISSP
  • CASP+
  • Security+
  • CISM
  • CCSP
  • CGRC (formerly CAP)
  • CEH
  • GIAC certifications
  • Cloud security certifications (AWS, Azure, Google Cloud)
  • Experience with Xacta, eMASS, or other Governance,
  • Risk, and Compliance (GRC) platforms.
  • Experience with Agile Authorization and Continuous Authorization.
  • Experience supporting Cloud Service Providers (CSPs).
  • Knowledge of Zero Trust Architecture.
  • Experience supporting DevSecOps pipelines.
  • Experience with AI-enabled systems and emerging technologies.