> Markdown version of [/jobs/ext/2421646-tenable-incident-response-sme](https://www.wearedevelopers.com/jobs/ext/2421646-tenable-incident-response-sme). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Tenable Incident Response SME

- **Company:** MatchPoint Solutions
- **Location:** Chicago, IL, United States
- **Experience:** Expert
- **Salary:** $114,400.0 - $124,800.0
- **Contract:** Temporary to permanent
- **Skills:** Antivirus Softwares, Microsoft Azure, Cloud Computing, Cloud Computing Security, Configuration Management, Cyber Security, Databases, Information Leak Prevention, Identity and Access Management, Intrusion Detection and Prevention, Security Information and Event Management, Software Vulnerability Management, Software Security, Falcon Platform, Sumo Logic (Software), Security Orchestration, Automation & Response
- **Published:** August 30, 2026
- **Apply:** https://www.careerjet.com/jobad/us231f7a236eb0d7f13f82af7904cab09e

## About the Role

At least nine years of cybersecurity experience, including significant experience with security engineering, vulnerability management, and incident response.
Bachelor's degree, or equivalent education and experience, in a technical discipline. Relevant professional security certifications may support an equivalent background.
Advanced, professional, or expert level security certification is preferred.
Demonstrated experience leading complex security investigations, response activities, projects, and initiatives.
Experience leading, supporting, managing, and administering one or more enterprise security applications.
Ability to work independently with minimal oversight across a broad range of security initiatives.
In depth knowledge of information security principles, architecture, threats, risk, controls, and advanced incident investigation techniques.
Significant experience with asset inventory, configuration management, exposure management, threat detection, vulnerability identification and remediation, identity protection, security operations, and security orchestration, automation, and response.
Experience designing and implementing security controls for desktop, server, network, database, cloud, and application environments.
Leadership, project management, communication, customer service, and organizational skills.
Experience with the Health Insurance Portability and Accountability Act, National Institute of Standards and Technology guidance, and Payment Card Industry standards is preferred.

## Description

The Tenable Incident Response SME serves as the technical lead for vulnerability driven security investigations and response activities. This six-month contract to hire role uses Tenable with CrowdStrike, Microsoft Azure, and Sumo Logic to identify exploitable risk, assess threat exposure, and support rapid containment and remediation. The SME will guide vulnerability prioritization, risk reduction strategies, and incident response practices across enterprise environments. The role also supports broader cyber systems, including cloud security, data protection, security orchestration and automation, and security information and event management. Participation in a 24/7 on call rotation may be required.
Responsibilities:
Lead complex security incident reviews, investigations, response, recovery, containment, and remediation activities.
Use Tenable findings with CrowdStrike, Microsoft Azure, and Sumo Logic telemetry to identify exploitable vulnerabilities and assess threat exposure.
Prioritize vulnerabilities according to risk, exploitability, business impact, and available threat intelligence.
Architect, design, and implement security technologies and processes in collaboration with security colleagues, business owners, and application owners.
Manage, administer, monitor, and support security applications while resolving technical issues and improving operational value through automation.
Measure and report enterprise security capabilities using automated and manual methods.
Develop and maintain security policies, standards, standard operating procedures, control documentation, capability strategies, and business case materials.
Perform security reviews, risk assessments, and impact assessments for new and existing systems before and after implementation.
Develop, maintain, audit, and enhance enterprise security controls across desktop, server, network, database, cloud, and application environments.
Support security awareness communications, audits, assessments, and compliance requests.
Assist with compliance requirements related to the Health Insurance Portability and Accountability Act, Payment Card Industry standards, National Institute of Standards and Technology guidance, and other applicable requirements.
Mentor and cross train team members on incident response, vulnerability management, and security application operations.
Participate in an on call rotation and perform other assigned duties., Tenable vulnerability and exposure management capabilities
CrowdStrike endpoint detection and response capabilities
Microsoft Azure cloud security capabilities
Sumo Logic security information and event management capabilities
Security orchestration, automation, and response platforms
Data loss prevention, email security, system hardening, intrusion detection and prevention, antimalware, proxy, identity security, cloud security posture management, and cloud native application protection tools
MatchPoint Solutions provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.


## Related Videos

- [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)