Information Security Engineer

Description

Who is the company?

The company is the Exposure Management company. Over 40,000 organizations around the globe rely on the company to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey!

What makes the company such a great place to work?

Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together!

Applicants must be authorized to work for any employer in the U.S. without sponsorship. We are unable to provide sponsorship for work visas of any kind at the time of hire, or at any point during employment. This includes, but is not limited to: F1-OPT, F1-CPT, H-1B, TN, J-1, etc

Responsibilities

• In this role, you’ll help evaluate, implement and maintain the company’s cybersecurity systems. You’ll work alongside Security Engineers, Analysts and the Digital Solutions Department to protect the confidentiality, integrity and availability of the company’s assets.
• Your Opportunity:
• Help evaluate, deploy and improve security solutions across on-premise, cloud and SaaS environments
• Identify opportunities to improve the resiliency and quality of security systems and applications
• Support maintenance of security tooling and appliances
• Assist in identifying and remediating threats and risks reported by Security Analysts, assessments or third parties
• Participate in security reviews of SaaS, on-premise, and AI-enabled products (including LLM integrations, MCP servers and agentic tools), with guidance from senior engineers
• Help apply baseline AI security controls: least-privilege access, no static credentials, scoped tokens, logging/auditing of agent activity, and data handling guardrails
• Support detection and monitoring use cases for AI and agentic workloads
• Document projects and write Standard Operating Procedures
• Build strong working relationships across the team and with partner groups
• Manage your time and responsibilities, set accurate expectations and meet deadlines
• Provide infrequent, as-needed off-hours support
• Other duties as assigned

Requirements

• Working knowledge of securing Windows, Linux, mobile devices and cloud (IaaS) environments
• Familiarity with security architecture and review methodologies (e.g., threat modeling, STRIDE)
• Foundational understanding of network security (IDS/IPS, web proxies, traffic analysis) and the TCP/IP stack and common protocols (DNS, SMTP, DHCP)
• Familiarity with authentication and access concepts: SSH, LDAP, SSO/OAuth/OIDC, RBAC, MFA
• Understanding of Zero Trust and cloud security principles
• Hands-on experience with 2 or more of: EDR/antivirus, SIEM/log correlation, CASB, web proxies, PAM, MDM, DLP, email security/DMARC
• Basic understanding of AI/LLM security risks (prompt injection, data leakage, excessive agent permissions, supply chain risk) and curiosity about MCP and agentic architectures
• Scripting or automation ability (Python, Bash or PowerShell) is a plus
• BA/BS in Computer Science, IT or a related field, SANS training, or equivalent experience
• 3-5 years of Information Security experience; some cloud experience preferred
• Security+, GIAC, AWS security or similar certifications are a plus
• Self-motivated, with a passion for cybersecurity and a willingness to innovate
• Able to work effectively in an agile environment, with growing independence
• Hybrid/on-site at our Columbia, MD headquarters
• LI-Hybrid
• LI-MS1
• This is the base pay range for this position. Compensation for the role will depend on a number of factors, including the candidate's qualifications, skills, competencies, location and experience, and may fall outside of the range shown. Employees are also eligible for variable compensation in addition to base pay (commission for sales roles, bonus for non-sales roles), depending on company and individual performance. The company also offers a variety of comprehensive and competitive benefits which include: medical, dental, vision, disability and life insurance; 401(k) retirement savings with company match; an employee stock purchase plan; an employee referral program; flexible spending accounts; an Employee Assistance Program (EAP); education assistance; parental leave; paid time off (PTO); company-paid holidays; health and wellness events; and community programs.
• US Pay Range
• $102,500 - $136,500 USD
• The company Data Consent Statement
• The company is committed to protecting the privacy and security of your personal data. Depending on your location, one or more of the following notices may apply to you: