Cloud Security Engineer: IAM, IaC & Risk Reviews

tenableinc; United States; Hybrid; USD 110,000 - 160,000; Full time

Job summary

Tenable is seeking a Security Engineer to join the Security Engineering & Architecture group. The role spans cloud and general security engineering, ideal for those who want breadth across InfoSec rather than a single domain.

You'll support cloud security operations, participate in architecture reviews, and help with IAM reviews while collaborating across engineering, GRC, and TPRM to ensure secure, scalable solutions.

Qualifications

• 2–3 years in security engineering, cloud security, IT security, or similar role.
• Hands-on knowledge of one major cloud provider (AWS/Azure/GCP) including IAM and networking basics.
• Basic understanding of security architecture reviews or threat modeling concepts.
• Familiarity with least-privilege, audit logging, secrets management, and secure config baselines.
• Strong written communication for documenting review findings and remediation guidance.

Responsibilities

• Monitor day-to-day cloud security operations across cloud environments.
• Contribute to security architecture reviews for new systems and vendor onboarding.
• Identify misconfigurations, excessive permissions, and insecure IaC patterns; track remediation.
• Participate in risk assessments and threat modeling for new projects.
• Assist with IAM/RBAC reviews and enforce least-privilege practices.
• Learn AI/LLM platform interactions and apply risk awareness during reviews.
• Collaborate cross-functionally with engineering, GRC, and TPRM to move findings forward.

Skills

Security engineering

Cloud security

IAM basics

Threat modeling

Audit logging

Documentation

Cross-functional collaboration

Tools

Terraform

CloudFormation

Job description

Tenable is seeking a Security Engineer to join the Security Engineering & Architecture group. The role spans cloud and general security engineering, ideal for those who want breadth across InfoSec rather than a single domain.

You'll support cloud security operations, participate in architecture reviews, and help with IAM reviews while collaborating across engineering, GRC, and TPRM to ensure secure, scalable solutions.