T

Tenable

Vulnerability management for IT and OT

Information Security Engineer

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-timeColumbia, MD, USA

About the Job

Requirements

  • Working knowledge of securing Windows, Linux, mobile devices, and cloud infrastructure-as-a-service environments.
  • Familiarity with security architecture and review methodologies, such as threat modeling and STRIDE.
  • Foundational understanding of network security, including intrusion detection and prevention systems, web proxies, traffic analysis, the TCP/IP stack, and common protocols such as DNS, SMTP, and DHCP.
  • Familiarity with authentication and access concepts, including SSH, LDAP, single sign-on, OAuth, OpenID Connect, role-based access control, and multi-factor authentication.
  • Understanding of Zero Trust and cloud security principles.
  • Hands-on experience with at least two of the following: endpoint detection and response or antivirus, security information and event management or log correlation, cloud access security broker, web proxies, privileged access management, mobile device management, data loss prevention, and email security or DMARC.
  • Basic understanding of AI and large language model security risks, including prompt injection, data leakage, excessive agent permissions, and supply chain risk, and curiosity about MCP and agentic architectures.
  • Three to five years of information security experience.
  • Ability to work effectively in an agile environment with growing independence.

Responsibilities

  • Help evaluate, deploy, and improve security solutions across on-premise, cloud, and SaaS environments.
  • Identify opportunities to improve the resiliency and quality of security systems and applications.
  • Support maintenance of security tooling and appliances.
  • Assist in identifying and remediating threats and risks reported by Security Analysts, assessments, or third parties.
  • Participate, with guidance from senior engineers, in security reviews of SaaS, on-premise, and AI-enabled products, including LLM integrations, MCP servers, and agentic tools.
  • Help apply baseline AI security controls, including least-privilege access, avoiding static credentials, scoped tokens, logging and auditing agent activity, and data handling guardrails.
  • Support detection and monitoring use cases for AI and agentic workloads.
  • Document projects and write Standard Operating Procedures.
  • Build working relationships across the team and with partner groups.
  • Manage time and responsibilities, set accurate expectations, and meet deadlines.
  • Provide infrequent, as-needed off-hours support.
  • Perform other duties as assigned.

Desired Qualifications

  • Some cloud experience is preferred.
  • Scripting or automation ability using Python, Bash, or PowerShell is a plus.
  • Security+, GIAC, AWS security, or similar certifications are a plus.

About the Company

Tenable

Vulnerability management for IT and OT

Tenable provides vulnerability management for IT and OT environments, helping organizations identify and fix security weaknesses. Its products include Nessus, a widely used vulnerability scanner; Tenable.io, a cloud-based platform that inventories assets and prioritizes risks; and Tenable.ot, which protects industrial control systems and other operational technology. The company differentiates itself with an integrated, subscription-based suite that covers both IT and OT, plus professional services and PCI ASV compliance support. Tenable’s goal is to help customers reduce cyber risk by enabling teams to identify, investigate, and remediate vulnerabilities efficiently across diverse environments.

Company size
1,001-5,000
Company stage
IPO
Headquarters
Columbia, MD
Founded
2002

Recently Posted Jobs

Explore more opportunities at Tenable

See more jobs