Cyber Security Engineer (Tenable)

Key Responsibilities

• Manage, maintain, and optimize Tenable solutions including:
  • Tenable Security Center
  • Nessus
  • Tenable.io
  • TenableOne
• Conduct periodic vulnerability assessments, hardening scans, and compliance scans across infrastructure, applications, and cloud environments.
• Analyze scan results, identify security gaps, and prioritize vulnerabilities based on risk and business impact.
• Coordinate with IT, infrastructure, application, and security stakeholders to socialize vulnerability reports and remediation plans.
• Track remediation activities and ensure timely closure of identified vulnerabilities.
• Develop dashboards, reports, and metrics for leadership and operational teams.
• Ensure vulnerability management processes align with organizational security policies and compliance requirements.
• Support audit and compliance initiatives by providing required vulnerability and remediation evidence.
• Continuously improve vulnerability scanning methodologies, processes, and reporting standards.

Required Skills & Experience

• 8+ years of experience in Cyber Security with strong expertise in Vulnerability Management.
• Hands-on experience with Tenable tools such as Tenable Security Center, Nessus, Tenable.io, and TenableOne.
• Strong understanding of vulnerability assessment methodologies, risk scoring, and remediation lifecycle management.
• Experience conducting compliance and hardening scans aligned with industry standards.
• Knowledge of operating systems, networking, cloud platforms, and security best practices.
• Strong analytical and troubleshooting skills.
• Excellent stakeholder communication and coordination skills.
• Ability to work independently and lead security initiatives effectively.

Preferred Qualifications

• Relevant certifications such as:
  • Tenable Certified Specialist
  • CEH
  • CISSP
  • CompTIA Security+
  • OSCP (preferred)
• Experience with enterprise security operations and governance processes.
• Familiarity with regulatory and compliance frameworks such as ISO 27001, PCI-DSS, CIS Benchmarks, etc.