Summary
Overview
Work History
Education
Skills
Certification
Affiliations
Quote
Accomplishments
Software
Websites
Timeline
web
Milton S. Chamblee III

Milton S. Chamblee III

Senior Vulnerability Management Engineer
Newport News,VA

Summary

Senior Vulnerability Management Engineer and Security Compliance professional with 9 years of experience securing large, regulated, DoD-aligned enterprise environments. Administers Tenable Security Center 6.8 and distributed Nessus infrastructure supporting 55,000 licensed IPs, 25,000+ Nessus Agents, 13 Managers, and 11 scanners. Leads credentialed, Agent-based, and compliance scanning; risk-based prioritization; remediation validation; POA&M and waiver support; and CMMC audit-evidence generation. Combines RHEL platform engineering, PKI/TLS, API automation, and stakeholder reporting with RMF, NIST SP 800-53/171, CMMC Level 2, DISA STIG, DFARS, and FISMA expertise.

Overview

9
9
years of professional experience
50
50

Thousand licensed IPs supported in Tenable.sc

25
25

Thousand Nessus Agents supported

4
4
years of post-secondary education

Work History

Computer Systems Security Analyst (VM Engineer)

HII – Newport News Shipbuilding
Newport News, VA
04.2023 - Current
  • Administer Tenable Security Center 6.8 and distributed Nessus infrastructure supporting a 55,000-IP enterprise license, 25,000+ Nessus Agents, 13 Managers, and 11 scanners across segmented, DoD-aligned environments.
  • Scope, schedule, execute, troubleshoot, and report credentialed, Agent-based, active, and compliance scans using scan zones, repositories, policies, schedules, credentials, plugin feeds, imports, and data-freshness controls.
  • Analyze scan results, investigate false positives, and prioritize critical and high-severity findings using CISA KEV, CVE, CVSS, VPR, asset criticality, aging, exception status, and remediation evidence.
  • Drive remediation to closure through stakeholder follow-up, escalation, and post-remediation rescan validation; support POA&M and waiver workflows and produce Tenable.sc host-level evidence for CMMC audit requests.
  • Troubleshoot RHEL scanning-platform issues involving PKI/TLS, SSH, LDAPS, systemd, SELinux, storage, databases, backups, feeds, permissions, proxies, and network dependencies.

Senior Systems Engineer, Cybersecurity

Infosys Public Services Inc.
Newport News , VA
07.2022 - 04.2023
  • Standardized vulnerability-management and security-compliance practices for federal-contractor environments, aligning technical operations with DFARS, FISMA, NIST SP 800-53, and risk-management requirements.
  • Centralized vulnerability tracking and compliance reporting in Archer GRC, improving visibility into findings, ownership, remediation status, exceptions, evidence, and stakeholder follow-up.
  • Coordinated business, client, operations, and security requirements across stakeholder groups to support controlled integration of vulnerability-management processes and compliance activities.
  • Monitored emerging vulnerabilities and federal guidance, translating relevant changes into updated procedures, risk analysis, remediation priorities, and vulnerability-management activities.

Vulnerability Management Engineer (CSSA)

HII – Newport News Shipbuilding
Newport News, VA
06.2021 - 06.2022
  • Official title: Computer Systems Security Analyst. Expanded vulnerability-management responsibilities to approximately 63,000 enterprise assets and sustained a documented 98% remediation rate through risk-based prioritization, Archer GRC tracking, escalation, and cross-functional coordination.
  • Scoped, scheduled, monitored, and reported automated vulnerability assessments using Tenable.sc, distributed Nessus Managers and scanners, credentialed scan policies, repositories, and recurring reporting workflows.
  • Improved remediation visibility by centralizing finding ownership, aging, exceptions, supporting evidence, and escalation activity in Archer GRC; produced stakeholder-facing and audit-support vulnerability reporting.
  • Strengthened program consistency through vulnerability-management SOPs, technical documentation, knowledge transfer, administrator guidance, and repeatable remediation-validation procedures.

Vulnerability Management Analyst (SAA)

HII – Newport News Shipbuilding
Newport News, VA
09.2017 - 06.2021
  • Official title: Systems Application Analyst. Managed enterprise vulnerability assessments for 75,000+ devices across 10+ locations using Tenable.sc and Nessus for credentialed scanning, with Archer GRC supporting structured remediation tracking and escalation.
  • Helped sustain a 98% monthly remediation rate and reduced overdue vulnerabilities by 87% through risk-based prioritization, ownership accountability, finding trending, reporting, and administrator follow-up.
  • Reduced average vulnerability-remediation time from 14.5 to 5.6 days and administrator triage effort from 3.4 to approximately 1 hour per week through automated reporting and workflow improvements.
  • Built a reusable vulnerability-management knowledge system, remediation playbook, and operational documentation; received the 2018 Newport News Shipbuilding Excellence in Action Award for cybersecurity process improvement.

Education

Master of Science - Cyber Operations

ECPI University
Virginia Beach, VA
08.2019 - 05.2021

Bachelor of Science - Cyber And Network Security

ECPI University
Virginia Beach, VA
06.2015 - 06.2017

Skills

Scan Segmentation

DFARS

Tenablesc REST API Automation

CMMC Audit Evidence

Tenable Security Center

Nessus Scanners

Nessus Agents

Credentialed Scanning

Scan Policy Tuning

PowerShell

Windows Server

Linux

Active Directory

SSH

NIST SP 800-53

NIST SP 800-171

POA&M Support

Nessus Managers

Compliance Scanning

False-Positive Analysis

Risk-Based Prioritization

Vulnerability Exception Management

Compensating Controls

Post-Remediation Rescan Validation

Archer GRC

ServiceNow/SMAX

CMMC Level 2

Technical SOP Development

Stakeholder Reporting

Risk Acceptance

Waiver Lifecycle Management

CISA KEV Prioritization

CVE Analysis

Agent-Based Scanning

VPR Analysis

CVSS Analysis

RMF

DISA STIG

RHEL

SELinux

Bash

PKI/TLS

Tenablesc Query Development

Scan Scheduling

FISMA

NIST SP 800-40

Repository Management

Plugin Feed Management

Tenablesc Dashboards

Vulnerability Reporting

Nessus Agent Deployment

Agent Coverage Analysis

RHEL Troubleshooting

Certificate Lifecycle Management

Backup and Recovery Validation

Microsoft Planner

SharePoint

GitLab

Azure DevOps

Splunk

Certification

CompTIA Security+

Affiliations

  • (ISC)² Member

Quote

"Security outcomes improve when technical evidence, risk decisions, and remediation ownership remain connected."
- Milton S. Chamblee III

Accomplishments

Reduced overdue vulnerabilities by 87% through risk-based prioritization, ownership accountability, remediation tracking, and administrator follow-up.

Reduced average vulnerability-remediation time from 14.5 days to 5.6 days and lowered administrator triage effort from 3.4 hours to approximately 1 hour per week through automated reporting and workflow improvements.

Supported a 98% monthly remediation rate across enterprise vulnerability-management operations through Tenable.sc scanning, Archer GRC tracking, escalation, and post-remediation validation.

Supported enterprise Nessus Agent modernization across approximately 25,000 endpoints and 2,800 servers, including 12 Nessus Managers and 10 enclave deployments, to improve authenticated scanning coverage and reduce credential-management overhead.

Developed Tenable.sc host-level queries and audit evidence supporting CMMC requests, enterprise waiver documentation, vulnerability exceptions, POA&M workflows, and remediation governance.

Software

Tenable Security Center

Nessus

Nessus Manager

Nessus Agent

Archer GRC

ServiceNow

PowerShell

Azure Devops

Microsoft Planner

Microsoft SharePoint

Splunk Enterprise

GitLab

SMAX

Timeline

CompTIA SecurityX

11-2024

Computer Systems Security Analyst (VM Engineer)

HII – Newport News Shipbuilding
04.2023 - Current

Senior Systems Engineer, Cybersecurity

Infosys Public Services Inc.
07.2022 - 04.2023

CompTIA Security+

05-2022

Vulnerability Management Engineer (CSSA)

HII – Newport News Shipbuilding
06.2021 - 06.2022

Master of Science - Cyber Operations

ECPI University
08.2019 - 05.2021

ITILv3

04-2018

Vulnerability Management Analyst (SAA)

HII – Newport News Shipbuilding
09.2017 - 06.2021

Bachelor of Science - Cyber And Network Security

ECPI University
06.2015 - 06.2017
Milton S. Chamblee IIISenior Vulnerability Management Engineer