PCI Analyst

The PCI ASV Analyst is responsible for guiding Tenable customers through the PCI DSS ASV external scanning process to achieve compliance with requirement 11.3.2. This role focuses on leading all client-facing engagements related to Tenable’s status as a PCI Approved Scanning Vendor (ASV), ensuring a successful and compliant outcome. The PCI ASV Analyst manages client expectations, provides consultative advice on scan findings, and fosters positive relationships by serving as a subject matter expert on the PCI ASV process.

Responsibilities

Analyze and validate client-submitted PCI ASV scans for attestation; Conduct in-depth analysis of customer-submitted scan disputes by reviewing required evidence, performing independent verification, and recreating scenarios in a lab environment; Serve as a trusted advisor by guiding customers through the PCI ASV scan submission process; Collaborate with Technical Support Engineers; Proactively identify and contribute to workflow and process improvements; Maintain required PCI ASV certifications and CPE hours; Resolve escalated customer issues by troubleshooting complex technical findings; Perform other PCI ASV duties as assigned

Requirements

At least five (5) years of information security experience, with specialized experience including a minimum of one (1) year in vulnerability scanning and/or penetration testing and at least two (2) years in any two of the following areas: Network security, Application security, System security, IT security auditing, or IT security risk assessment; Bachelor’s degree in a related technical field such as Information Technology, Computer Science, or equivalent work experience; Experience with Linux/Unix and Windows systems administration and security posturing; In-depth knowledge of network devices, their deployment and typical configurations; In-depth knowledge of networking; Knowledge of various web servers and other externally facing software applications; Experience in vulnerability scans and web app configuration scanning; Knowledge of CVSS scoring and how to use NVD to verify CVE’s; Customer service experience within the technical and cybersecurity background; Outstanding written and verbal communication skills; Ability to comfortably interact with senior management in a consultative manner; Ability to multi-task and manage multiple priorities in a fast-paced environment; A high degree of integrity, ethics, and confidentiality; Ability to work across different timezones, which may require an adjusted daily schedule on occasion; Must obtain PCI Certification within 3 months of employment

Nice to have

Preferably holds one of the current industry-recognized security certifications: CISA, CISM, CISSP, CCSP, GWAPT, Current PCI-QSA or PCI-ASV Certification