Information Security Engineer

Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey!

Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #One Tenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters.

We deliver results that exceed expectations and we win together!

Applicants must be authorized to work for any employer in the U.S. without sponsorship. We are unable to provide sponsorship for work visas of any kind at the time of hire, or at any point during employment. This includes, but is not limited to: F1-OPT, F1-CPT, H-1B, TN, J-1, etc

In this role, you’ll help evaluate, implement and maintain Tenable’s cybersecurity systems. You’ll work alongside Security Engineers, Analysts and the Digital Solutions Department to protect the confidentiality, integrity and availability of Tenable’s assets.

Help evaluate, deploy and improve security solutions across on-premise, cloud and SaaS environments

Identify opportunities to improve the resiliency and quality of security systems and applications

Support maintenance of security tooling and appliances

Assist in identifying and remediating threats and risks reported by Security Analysts, assessments or third parties

Participate in security reviews of SaaS, on-premise, and AI-enabled products (including LLM integrations, MCP servers and agentic tools), with guidance from senior engineers

Help apply baseline AI security controls: least-privilege access, no static credentials, scoped tokens, logging/auditing of agent activity, and data handling guardrails

Support detection and monitoring use cases for AI and agentic workloads

Document projects and write Standard Operating Procedures

Build strong working relationships across the team and with partner groups

Manage your time and responsibilities, set accurate expectations and meet deadlines

Provide infrequent, as-needed off-hours support

Other duties as assigned

Working knowledge of securing Windows, Linux, mobile devices and cloud (IaaS) environments

Familiarity with security architecture and review methodologies (e.g., threat modeling, STRIDE)

Foundational understanding of network security (IDS/IPS, web proxies, traffic analysis) and the TCP/IP stack and common protocols (DNS, SMTP, DHCP)

Familiarity with authentication and access concepts: SSH, LDAP, SSO/OAuth/OIDC, RBAC, MFA

Understanding of Zero Trust and cloud security principles

Hands-on experience with 2 or more of: EDR/antivirus, SIEM/log correlation, CASB, web proxies, PAM, MDM, DLP, email security/DMARC

Basic understanding of AI/LLM security risks (prompt injection, data leakage, excessive agent permissions, supply chain risk) and curiosity about MCP and agentic architectures

Scripting or automation ability (Python, Bash or Power Shell) is a plus

BA/BS in Computer Science, IT or a related field, SANS training, or equivalent experience

3-5 years of Information Security experience; some cloud experience preferred

Security+, GIAC, AWS security or similar certifications are a plus

Self-motivated, with a passion for cybersecurity and a willingness to innovate

Able to work effectively in an agile environment, with…