Cybersecurity Engineer / Consultant (Tenable) #IJO

RECRUIT EXPRESS PTE LTD; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

RECRUIT EXPRESS PTE LTD is seeking a cybersecurity consultant with hands-on Tenable deployment experience to lead security integrations and vulnerability management initiatives. You will work with AD/Azure AD, cloud workloads, and SIEM/SOAR platforms to improve client security postures.

The role requires strong knowledge of frameworks such as NIST CSF and ISO 27001, plus ability to deliver workshops and documentation for client teams.

Qualifications

• 4 years of professional experience in cybersecurity consulting or operations.
• Minimum 2 years hands-on experience with vulnerability management solutions (Tenable preferred).
• Hands-on deployment of Tenable Security Center, TenableOne, Nessus, Tenable Identity Exposure.
• Deep Active Directory expertise: Kerberos authentication, LDAP, GPO, privilege escalation risks, AD hardening.
• Cloud security knowledge: Azure AD, AWS IAM/Security, GCP security; workload and identity protection.
• Strong background in Linux and Windows system administration, patching, and hardening.
• Familiarity with SIEM/SOAR platforms and log integration (Splunk, QRadar, ArcSight, ServiceNow).
• Solid understanding of CVSS risk scoring and vulnerability prioritization.

Responsibilities

• Lead deployment and configuration of Tenable solutions (Security Center, Tenable One, Nessus, Tenable Identity Exposure).
• Conduct Active Directory and Azure AD security integration, including Kerberos, LDAP, IAM, and privilege exposure analysis.
• Support cloud security integrations (Azure, AWS, GCP) for workloads and identities.
• Deliver vulnerability management services: scanning, CVSS-based risk scoring, prioritization, remediation advisory.
• Perform SIEM/SOAR integrations (Splunk, QRadar, ArcSight, ServiceNow) for automated incident response.
• Provide knowledge transfer and workshops on Tenable and vulnerability management best practices.
• Develop project documentation (HLDs, LLDs, configuration guides, runbooks).
• Coordinate with customer IT/security to align patching with findings.
• Act as trusted advisor on cybersecurity frameworks (NIST CSF, ISO 27001, CIS Controls, PCI DSS, MAS TRM).
• Support pre-sales solution design or POCs when required.

Skills

Tenable

Vulnerability mgmt

AD Security

Cloud Security

SIEM/SOAR

NIST CSF

ISO 27001

Tools

Tenable Security Center

TenableOne

Nessus

Tenable Identity Exposure

Job description

Key Responsibilities

• Lead deployment and configuration of Tenable solutions(Security Center, Tenable One, Nessus, Tenable Identity Exposure).
• Conduct Active Directory and Azure AD security integration, including Kerberos, LDAP, IAM, and privilege exposure analysis.
• Support cloud security integrations (Azure, AWS, GCP), ensuring proper coverage of cloud workloads and identities.
• Deliver vulnerability management services: scanning, CVSS-based risk scoring, prioritization, and remediation advisory.
• Perform SIEM/SOAR integrations (Splunk, QRadar, ArcSight, ServiceNow, etc.) to enable automated incident response.
• Provide knowledge transfer and workshops to customer teams on Tenable and vulnerability management best practices.
• Develop and deliver project documentation (HLDs, LLDs, configuration guides, runbooks).
• Work with customer IT and security teams to ensure patching, remediation, and mitigation plans are aligned with findings.
• Act as a trusted advisor on cybersecurity frameworks (NISTCSF, ISO 27001, CIS Controls, PCI DSS, MAS TRM).
• Support pre-sales solution design or proof-of-concepts (POCs) when required.

Required Skills & Experience

• 4 years of professional experience in cybersecurity consulting or operations.
• Minimum 2 years hands-on experience with vulnerability management solutions (Tenable preferred).
• Hands-on deployment of Tenable Security Center, TenableOne, Nessus, Tenable Identity Exposure.
• Deep Active Directory expertise: Kerberos authentication,LDAP, GPO, privilege escalation risks, AD hardening.
• Cloud security knowledge: Azure AD, AWS IAM/Security, GCP security; experience with workload and identity protection.
• Strong background in Linux and Windows system administration, patching, and hardening.
• Familiarity with SIEM/SOAR platforms and log integration (Splunk, QRadar, ArcSight, ServiceNow).
• Solid understanding of CVSS risk scoring and vulnerability prioritization.