PCI Analyst

At least five (5) years of information security experience, with specialized experience that includes a minimum of one (1) year in vulnerability scanning and/or penetration testing and at least two (2) years in any two of the following areas: Network security, Application security, System security, IT security auditing, or IT security risk assessment.

Experience with Linux/Unix and Windows systems administration and security posturing.

In-depth knowledge of network devices, their deployment and typical configurations.

In-depth knowledge of networking.

Knowledge of various web servers and other externally facing software applications.

Experience in vulnerability scans and web app configuration scanning.

The PCI ASV Analyst is responsible for guiding Tenable customers through the PCI DSS ASV external scanning process to achieve compliance with requirement 11.3.2.

This role focuses on leading all client-facing engagements related to Tenable’s status as a PCI Approved Scanning Vendor (ASV), ensuring a successful and compliant outcome.

The PCI ASV Analyst manages client expectations, provides consultative advice on scan findings, and fosters positive relationships by serving as a subject matter expert on the PCI ASV process.

Analyze and validate client-submitted PCI ASV scans for attestation, ensuring all reviews are conducted with a high degree of accuracy and adherence to PCI DSS standards.

Conduct in-depth analysis of customer-submitted scan disputes by reviewing required evidence, performing independent verification, and recreating scenarios in a lab environment to ensure a fair and compliant resolution.

Serve as a trusted advisor by guiding customers through the PCI ASV scan submission process to help them achieve their compliance objectives.