Cyber Security SME

Job Title
Cyber Security Subject Matter Expert (SME) Tenable Security Platforms

Job Summary
We are seeking an experienced Cyber Security SME with deep expertise in the Tenable security ecosystem to lead vulnerability management, exposure management, cloud security, and attack surface management initiatives across the enterprise.
The successful candidate will be responsible for the implementation, optimization, administration, and continuous improvement of key Tenable solutions including:

• Tenable One
• Tenable.io
• Tenable Attack Surface Management
• Tenable Attack Path Analysis
• Tenable Cloud Security
• Tenable Web App Scanning

This role requires strong technical, analytical, and stakeholder engagement skills to support enterprise-wide cyber security operations and risk reduction programs.

Key Responsibilities
Vulnerability & Exposure Management

• Administer and optimize Tenable vulnerability and exposure management platforms.
• Perform enterprise-wide vulnerability assessments and exposure analysis.
• Develop and maintain vulnerability management standards, procedures, and reporting frameworks.
• Prioritize remediation activities based on risk, exploitability, and business impact.
• Conduct attack path analysis to identify critical security weaknesses and privilege escalation paths.

Tenable Platform Administration

• Configure, maintain, and troubleshoot Tenable platform integrations and scanning infrastructure.
• Manage scan policies, credentials, asset inventories, and discovery processes.
• Ensure optimal performance and coverage across on-premises, cloud, and hybrid environments.
• Maintain platform upgrades, patches, and operational health checks.

Cloud & Attack Surface Security

• Implement and manage cloud security posture management controls using Tenable Cloud Security.
• Monitor cloud environments for misconfigurations, compliance deviations, and security risks.
• Manage external attack surface discovery and monitoring using Tenable ASM.
• Identify exposed assets, shadow IT, internet-facing vulnerabilities, and unauthorized services.

Web Application Security

• Configure and manage web application scanning using Tenable WAS.
• Perform authenticated and unauthenticated scans of enterprise applications.
• Work with development and application teams to remediate web application vulnerabilities.

Reporting & Risk Management

• Produce executive and technical security reports, dashboards, and metrics.
• Produce customized reports based on different criteria and requirements.
• Present risk findings and remediation recommendations to stakeholders.
• Track remediation progress and validate vulnerability closure.
• Support audit, governance, and compliance requirements.

Security Operations & Collaboration

• Work closely with infrastructure, cloud, network, application, and SOC teams.
• Support incident investigations related to vulnerabilities and exposures.
• Provide technical guidance and mentorship to junior security personnel.
• Participate in security architecture reviews and risk assessments.

Required Skills & Experience
Technical Skills

• Strong hands-on experience with:
• Tenable One
• Tenable.io
• Tenable Attack Surface Management
• Tenable Attack Path Analysis
• Tenable Cloud Security
• Tenable Web App Scanning
• Tenable Lumin

• Experience with vulnerability management and exposure management programs.
• Knowledge of:
• Cloud platforms (AWS, Azure, GCP)
• Network security concepts
• Web application security
• Identity and access management
• Risk-based vulnerability prioritization

• Experience with APIs, automation, scripting, and integrations.
• Familiarity with SIEM/SOAR integrations and security operations workflows.

Qualifications

• Bachelors degree in Cyber Security, Information Technology, Computer Science, or related field.
• Relevant security certifications preferred, such as:
• Tenable Certified Professional
• CISSP
• CISM
• CEH
• Security+

Experience

• 5+ years of experience in cyber security or vulnerability management.
• Proven experience implementing and managing enterprise Tenable solutions.
• Experience working in large-scale enterprise or hybrid cloud environments.

Preferred Skills

• Knowledge of compliance frameworks (ISO 27001, NIST, CIS, PCI-DSS).
• Experience with scripting languages such as PowerShell, Python, or Bash.
• Strong analytical and troubleshooting abilities.

Soft Skills

• Strong communication and stakeholder management skills.
• Ability to explain technical risks to non-technical audiences.
• Strong documentation and reporting skills.
• Ability to work independently and within cross-functional teams.

Key Deliverables

• Enterprise vulnerability management reporting
• Exposure reduction initiatives
• Cloud security posture assessments
• Web application security scanning results
• Attack surface visibility and remediation tracking
• Security dashboards and executive reporting
• Customized reporting