> Markdown version of [/jobs/ext/4640170-information-security-engineer](https://www.wearedevelopers.com/jobs/ext/4640170-information-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Engineer

- **Company:** Tenable
- **Location:** Columbia, MD, United States
- **Experience:** Experienced
- **Salary:** $102,500 - $136,500
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Artificial Intelligence, Amazon Web Services, Antivirus Softwares, User Authentication, Bash Shell, Software as a Service, Cloud Computing, Cloud Computing Security, Cyber Security, Information Leak Prevention, Dynamic Host Configuration Protocol, Linux, Domain-Based Message Authentication Reporting and Conformance (DMARC), Domain Name System (DNS), Multi-Factor Authentication, Infrastructure as a Service (IaaS), Intrusion Detection Systems, Python (Programming Language), Network Security, Lightweight Directory Access Protocols (LDAP), Simple Mail Transfer Protocols, OAuth, OpenID, Windows PowerShell, Role-Based Access Control, AI-enabled Products, Zero Trust Network Access, Security Information and Event Management, TCP/IP, Traffic Analysis, Data Logging, Data Processing, Scripting, Large Language Models, Agentic-AI, Information Technology
- **Published:** November 8, 2026
- **Apply:** https://www.careerjet.com/job/us5908f92a995e004a6c9002fa13ef5c26/eaa

## About the Role

* Working knowledge of securing Windows, Linux, mobile devices and cloud (IaaS) environments
 * Familiarity with security architecture and review methodologies (e.g., threat modeling, STRIDE)
 * Foundational understanding of network security (IDS/IPS, web proxies, traffic analysis) and the TCP/IP stack and common protocols (DNS, SMTP, DHCP)
 * Familiarity with authentication and access concepts: SSH, LDAP, SSO/OAuth/OIDC, RBAC, MFA
 * Understanding of Zero Trust and cloud security principles
 * Hands-on experience with 2 or more of: EDR/antivirus, SIEM/log correlation, CASB, web proxies, PAM, MDM, DLP, email security/DMARC
 * Basic understanding of AI/LLM security risks (prompt injection, data leakage, excessive agent permissions, supply chain risk) and curiosity about MCP and agentic architectures
 * Scripting or automation ability (Python, Bash or PowerShell) is a plus
 * BA/BS in Computer Science, IT or a related field, SANS training, or equivalent experience
 * 3-5 years of Information Security experience; some cloud experience preferred
 * Security+, GIAC, AWS security or similar certifications are a plus
 * Self-motivated, with a passion for cybersecurity and a willingness to innovate
 * Able to work effectively in an agile environment, with growing independence
 * Hybrid/on-site at our Columbia, MD headquarters

## Description

Applicants must be authorized to work for any employer in the U.S. without sponsorship. We are unable to provide sponsorship for work visas of any kind at the time of hire, or at any point during employment. This includes, but is not limited to: F1-OPT, F1-CPT, H-1B, TN, J-1, etc
Your Role:
In this role, you'll help evaluate, implement and maintain Tenable's cybersecurity systems. You'll work alongside Security Engineers, Analysts and the Digital Solutions Department to protect the confidentiality, integrity and availability of Tenable's assets.
Your Opportunity:

 * Help evaluate, deploy and improve security solutions across on-premise, cloud and SaaS environments
 * Identify opportunities to improve the resiliency and quality of security systems and applications
 * Support maintenance of security tooling and appliances
 * Assist in identifying and remediating threats and risks reported by Security Analysts, assessments or third parties
 * Participate in security reviews of SaaS, on-premise, and AI-enabled products (including LLM integrations, MCP servers and agentic tools), with guidance from senior engineers
 * Help apply baseline AI security controls: least-privilege access, no static credentials, scoped tokens, logging/auditing of agent activity, and data handling guardrails
 * Support detection and monitoring use cases for AI and agentic workloads
 * Document projects and write Standard Operating Procedures
 * Build strong working relationships across the team and with partner groups
 * Manage your time and responsibilities, set accurate expectations and meet deadlines
 * Provide infrequent, as-needed off-hours support
 * Other duties as assigned