Security Engineer (Tenable | Qualys | SIEM )

Role overview

Vulnerability management

• Design, deploy, and manage scans using Tenable and Qualys platforms.
• Assess on-premises, cloud, and hybrid environments with authenticated and unauthenticated scans.
• Prioritise vulnerabilities using CVSS, threat intelligence, and business criticality.
• Track remediation, prepare trend reports, and present findings to technical and non-technical stakeholders.

SIEM and security operations

• Integrate vulnerability data into Splunk or an equivalent SIEM for correlation and dashboards.
• Monitor logs, events, and alerts for indicators of compromise and respond promptly.
• Maintain SIEM use cases, correlation rules, dashboards, and reports aligned to MITRE ATT&CK.
• Design and maintain secure systems and networks using firewalls, IDS/IPS, endpoint and network security, and deception solutions.
• Implement and manage IAM, PAM, DLP, and Web Proxy solutions.
• Conduct security audits and compliance assessments, including PCI-DSS and NIA.
• Participate in incident investigation, containment, and recovery.

Collaboration and enablement

• Embed security requirements in system and network design with cross-functional teams.
• Guide IT and network engineering teams in implementing security controls.
• Provide technical guidance, documentation, and knowledge transfer to internal teams.

Qualifications and experience

• Bachelor's degree in Computer Science, Information Systems, Engineering, or equivalent.
• CISSP, CISM, CEH, or equivalent security certification; ITIL v3 Foundation is desirable.
• 3–4 years of hands-on information security experience or similar.
• At least 2 years of direct hands-on experience with Tenable and/or Qualys.
• SIEM experience for log analysis, correlation, and dashboards; Splunk preferred, Azure Sentinel or QRadar considered.
• Experience with endpoint security, firewalls, IDS/IPS, IAM/PAM, DLP, and Web Proxy solutions.
• Strong networking knowledge and familiarity with PCI-DSS, NIA, and security best practices.

Platforms and technologies

• Tenable products include Nessus, Tenable.io, and Tenable.sc; Qualys products include VMDR and Cloud Agent.
• Security tools and domains include Splunk, NGAV, XDR, NDR, deception, firewalls, IDS/IPS, IAM/PAM, DLP, and Web Proxy.
• Networking includes TCP/IP, VLANs, VPNs, routing, and switching.