Information Security Engineer

Tenable, Inc.•Columbia, MD

3d•$102,500 - $136,500•Hybrid

About The Position

The Information Security Engineer helps evaluate, implement, and maintain Tenable’s cybersecurity systems. The role works alongside Security Engineers, Analysts, and the Digital Solutions Department to protect the confidentiality, integrity, and availability of Tenable’s assets. It supports security solutions across on-premise, cloud, and SaaS environments, including security reviews of products that use AI and agentic tools. The position is hybrid/on-site at Tenable’s Columbia, Maryland headquarters and may require infrequent, as-needed off-hours support.

Requirements

Working knowledge of securing Windows, Linux, mobile devices, and cloud (IaaS) environments.
Familiarity with security architecture and review methodologies, such as threat modeling and STRIDE.
Foundational understanding of network security, including IDS/IPS, web proxies, traffic analysis, the TCP/IP stack, and common protocols such as DNS, SMTP, and DHCP.
Familiarity with authentication and access concepts, including SSH, LDAP, SSO/OAuth/OIDC, RBAC, and MFA.
Understanding of Zero Trust and cloud security principles.
Hands-on experience with two or more of the following: EDR/antivirus, SIEM/log correlation, CASB, web proxies, PAM, MDM, DLP, and email security/DMARC.
Basic understanding of AI/LLM security risks, including prompt injection, data leakage, excessive agent permissions, and supply chain risk; curiosity about MCP and agentic architectures.
BA/BS in Computer Science, IT, or a related field, SANS training, or equivalent experience.
Three to five years of Information Security experience.
Self-motivated, with a passion for cybersecurity and willingness to innovate.
Ability to work effectively in an agile environment, with growing independence.
Applicants must be authorized to work for any employer in the U.S. without sponsorship; Tenable cannot provide work-visa sponsorship.

Nice To Haves

Scripting or automation ability in Python, Bash, or PowerShell.
Some cloud experience.
Security+, GIAC, AWS security, or similar certifications.

Responsibilities

Help evaluate, deploy, and improve security solutions across on-premise, cloud, and SaaS environments.
Identify opportunities to improve the resiliency and quality of security systems and applications.
Support maintenance of security tooling and appliances.
Assist in identifying and remediating threats and risks reported by Security Analysts, assessments, or third parties.
Participate, with guidance from senior engineers, in security reviews of SaaS, on-premise, and AI-enabled products, including LLM integrations, MCP servers, and agentic tools.
Help apply baseline AI security controls, including least-privilege access, avoiding static credentials, using scoped tokens, logging and auditing agent activity, and applying data-handling guardrails.
Support detection and monitoring use cases for AI and agentic workloads.
Document projects and write Standard Operating Procedures.
Build strong working relationships across the team and with partner groups.
Manage time and responsibilities, set accurate expectations, and meet deadlines.
Provide infrequent, as-needed off-hours support.
Perform other duties as assigned.

Benefits

Medical, dental, and vision insurance.
Disability and life insurance.
401(k) retirement savings plan with company match.
Employee stock purchase plan.
Employee referral program.
Flexible spending accounts.
Employee Assistance Program (EAP).
Education assistance.
Parental leave.
Paid time off (PTO).
Company-paid holidays.
Health and wellness events.
Community programs.
Variable compensation, including bonuses for non-sales roles, depending on company and individual performance.