Information Security Engineer

Location: US - Headquarters - Maryland - Columbia

Department: Information Security Engineering

Applicants must be authorized to work for any employer in the U.S. without sponsorship. We are unable to provide sponsorship for work visas of any kind at the time of hire, or at any point during employment. This includes, but is not limited to: F1-OPT, F1-CPT, H-1B, TN, J-1, etc

Your Role:

In this role, you’ll help evaluate, implement and maintain Tenable’s cybersecurity systems. You’ll work alongside Security Engineers, Analysts and the Digital Solutions Department to protect the confidentiality, integrity and availability of Tenable’s assets.

Your Opportunity:

• Help evaluate, deploy and improve security solutions across on-premise, cloud and SaaS environments
• Identify opportunities to improve the resiliency and quality of security systems and applications
• Support maintenance of security tooling and appliances
• Assist in identifying and remediating threats and risks reported by Security Analysts, assessments or third parties
• Participate in security reviews of SaaS, on-premise, and AI-enabled products (including LLM integrations, MCP servers and agentic tools), with guidance from senior engineers
• Help apply baseline AI security controls: least-privilege access, no static credentials, scoped tokens, logging/auditing of agent activity, and data handling guardrails
• Support detection and monitoring use cases for AI and agentic workloads
• Document projects and write Standard Operating Procedures
• Build strong working relationships across the team and with partner groups
• Manage your time and responsibilities, set accurate expectations and meet deadlines
• Provide infrequent, as-needed off-hours support
• Other duties as assigned

What You’ll Need:

• Working knowledge of securing Windows, Linux, mobile devices and cloud (IaaS) environments
• Familiarity with security architecture and review methodologies (e.g., threat modeling, STRIDE)
• Foundational understanding of network security (IDS/IPS, web proxies, traffic analysis) and the TCP/IP stack and common protocols (DNS, SMTP, DHCP)
• Familiarity with authentication and access concepts: SSH, LDAP, SSO/OAuth/OIDC, RBAC, MFA
• Understanding of Zero Trust and cloud security principles
• Hands-on experience with 2 or more of: EDR/antivirus, SIEM/log correlation, CASB, web proxies, PAM, MDM, DLP, email security/DMARC
• Basic understanding of AI/LLM security risks (prompt injection, data leakage, excessive agent permissions, supply chain risk) and curiosity about MCP and agentic architectures
• Scripting or automation ability (Python, Bash or PowerShell) is a plus
• BA/BS in Computer Science, IT or a related field, SANS training, or equivalent experience
• 3-5 years of Information Security experience; some cloud experience preferred
• Security+, GIAC, AWS security or similar certifications are a plus
• Self-motivated, with a passion for cybersecurity and a willingness to innovate
• Able to work effectively in an agile environment, with growing independence
• Hybrid/on-site at our Columbia, MD headquarters

#LI-Hybrid

#LI-MS1