Information Security Engineer

Tenable•Columbia, MD

1d•Hybrid

About The Position

The Information Security Engineer helps evaluate, implement, and maintain Tenable’s cybersecurity systems, working alongside Security Engineers, Analysts, and the Digital Solutions Department to protect the confidentiality, integrity, and availability of company assets. The role supports security solutions across on-premise, cloud, and SaaS environments, including security reviews of products with AI-enabled features. With guidance from senior engineers, the engineer helps apply baseline security controls for AI and agentic workloads and supports related detection and monitoring use cases. The position also involves maintaining security tooling and appliances, assisting with threat and risk remediation, documenting projects and writing Standard Operating Procedures, and collaborating with partner groups. The engineer is expected to manage responsibilities and deadlines effectively and provide infrequent, as-needed off-hours support. The role is hybrid/on-site at Tenable’s Columbia, Maryland headquarters.

Requirements

Working knowledge of securing Windows, Linux, mobile devices, and cloud (IaaS) environments.
Familiarity with security architecture and review methodologies, such as threat modeling and STRIDE.
Foundational understanding of network security, including IDS/IPS, web proxies, traffic analysis, the TCP/IP stack, and common protocols such as DNS, SMTP, and DHCP.
Familiarity with authentication and access concepts including SSH, LDAP, SSO/OAuth/OIDC, RBAC, and MFA.
Understanding of Zero Trust and cloud security principles.
Hands-on experience with at least two of the following: EDR/antivirus, SIEM/log correlation, CASB, web proxies, PAM, MDM, DLP, or email security/DMARC.
Basic understanding of AI/LLM security risks, including prompt injection, data leakage, excessive agent permissions, and supply chain risk; curiosity about MCP and agentic architectures.
A bachelor's degree in Computer Science, IT, or a related field, SANS training, or equivalent experience.
3–5 years of Information Security experience.
Self-motivated, passionate about cybersecurity, and willing to innovate.
Ability to work effectively in an agile environment, with growing independence.
Must be authorized to work for any U.S. employer without sponsorship; Tenable cannot provide work-visa sponsorship at hire or during employment.

Nice To Haves

Scripting or automation ability using Python, Bash, or PowerShell.
Some cloud experience.
Security+, GIAC, AWS security, or similar certifications.

Responsibilities

Help evaluate, deploy, and improve security solutions across on-premise, cloud, and SaaS environments.
Identify opportunities to improve the resiliency and quality of security systems and applications.
Support maintenance of security tooling and appliances.
Assist in identifying and remediating threats and risks reported by Security Analysts, assessments, or third parties.
Participate, with guidance from senior engineers, in security reviews of SaaS, on-premise, and AI-enabled products, including LLM integrations, MCP servers, and agentic tools.
Help apply baseline AI security controls, including least-privilege access, avoiding static credentials, scoped tokens, logging and auditing agent activity, and data-handling guardrails.
Support detection and monitoring use cases for AI and agentic workloads.
Document projects and write Standard Operating Procedures.
Build working relationships across the team and with partner groups.
Manage time and responsibilities, set accurate expectations, and meet deadlines.
Provide infrequent, as-needed off-hours support.
Perform other duties as assigned.

Benefits

Medical, dental, and vision insurance.
Disability and life insurance.
401(k) retirement savings with company match.
Employee stock purchase plan.
Employee referral program.
Flexible spending accounts.
Employee Assistance Program (EAP).
Education assistance.
Parental leave.
Paid time off (PTO).
Company-paid holidays.
Health and wellness events.
Community programs.
Variable compensation; non-sales roles may be eligible for a bonus depending on company and individual performance.