Tenable Cybersecurity Engineer

RECRUIT EXPRESS PTE LTD; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

RECRUIT EXPRESS PTE LTD is seeking a cybersecurity consultant to lead deployment and configuration of Tenable solutions while integrating AD/Azure AD security, and supporting cloud security efforts for Azure, AWS, and GCP. You will manage vulnerability assessments, CVSS scoring, and remediation advisory, plus SIEM/SOAR integrations to enable automated response.

The role requires hands-on experience with Tenable products, strong Linux/Windows administration, and the ability to run customer

Qualifications

• 3 years of professional cybersecurity consulting or operations experience.
• 3 years hands-on experience with vulnerability management solutions.
• Expertise in Active Directory including Kerberos authentication, LDAP, GPO, and privilege escalation risks.
• Experience deploying Tenable Security Center, Tenable One, Nessus, and Tenable Identity Exposure.

Responsibilities

• Lead deployment and configuration of Tenable solutions (Security Center, Tenable One, Nessus, Tenable Identity Exposure).
• Conduct Active Directory and Azure AD security integration, including Kerberos, LDAP, IAM, and privilege exposure analysis.
• Support cloud security integrations (Azure, AWS, GCP), ensuring coverage of cloud workloads and identities.
• Deliver vulnerability management services: scanning, CVSS-based risk scoring, prioritization, and remediation advisory.
• Perform SIEM/SOAR integrations (Splunk, QRadar, ArcSight, ServiceNow) to enable automated incident response.
• Provide knowledge transfer and workshops to customer teams on Tenable and vulnerability management best practices.
• Develop and deliver project documentation (HLDs, LLDs, configuration guides, runbooks).
• Work with customer IT and security teams to ensure patching, remediation, and mitigation plans are aligned with findings.
• Act as a trusted advisor on cybersecurity frameworks (NIST CSF, ISO 27001, CIS Controls, PCI DSS, MAS TRM).
• Support pre-sales solution design or proof-of-concepts (POCs) when required.

Skills

Vulnerability management

Active Directory

Cloud security

Tenable deployments

Linux administration

Windows administration

SIEM/SOAR

CVSS scoring

Communication

Project management

Tools

Tenable Security Center

Tenable One

Nessus

Tenable Identity Exposure

Splunk

QRadar

ArcSight

ServiceNow

Job description

Key Responsibilities

• Lead deployment and configuration of Tenable solutions (Security Center, Tenable One, Nessus, Tenable Identity Exposure).
• Conduct Active Directory and Azure AD security integration, including Kerberos, LDAP, IAM, and privilege exposure analysis.
• Support cloud security integrations (Azure, AWS, GCP), ensuring proper coverage of cloud workloads and identities.
• Deliver vulnerability management services: scanning, CVSS-based risk scoring, prioritization, and remediation advisory.
• Perform SIEM/SOAR integrations (Splunk, QRadar, ArcSight, ServiceNow, etc.) to enable automated incident response.
• Provide knowledge transfer and workshops to customer teams on Tenable and vulnerability management best practices.
• Develop and deliver project documentation (HLDs, LLDs, configuration guides, runbooks).
• Work with customer IT and security teams to ensure patching, remediation, and mitigation plans are aligned with findings.
• Act as a trusted advisor on cybersecurity frameworks (NISTCSF, ISO 27001, CIS Controls, PCI DSS, MAS TRM).
• Support pre-sales solution design or proof-of-concepts (POCs) when required.

Required Skills & Experience

• 3 years of professional experience in cybersecurity consulting or operations.
• 3 years hands-on experience with vulnerability management solutions (Tenable preferred).
• Deep Active Directory expertise: Kerberos authentication, LDAP, GPO, privilege escalation risks, AD hardening.
• Cloud security knowledge: Azure AD, AWS IAM/Security, GCP security; experience with workload and identity protection.
• Hands-on deployment of Tenable Security Center, TenableOne, Nessus, Tenable Identity Exposure.
• Strong background in Linux and Windows system administration, patching, and hardening.
• Familiarity with SIEM/SOAR platforms and log integration (Splunk, QRadar, ArcSight, ServiceNow).
• Solid understanding of CVSS risk scoring and vulnerability prioritization.
• Strong written and verbal communication skills with ability to run workshops and present to customers.
• Ability to work independently and manage multiple projects simultaneously.