Senior Manager, Information Security

Who is Tenable?

Tenable® is the Exposure Management company. 44,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 45 percent of the Global 2000, and large government agencies. Come be part of our journey!

What makes Tenable such a great place to work?

Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together!

Your Role:

In this key Manager position, this leader will evaluate, coordinate, implement and maintain Cybersecurity systems and lead a team of security professionals. This includes an organization of Information Security Analysts, Engineers and members of other Tenable teams to ensure the confidentiality, integrity and availability of all Tenable’s assets; those OnPrem and in the Cloud. This role does not just manage a team but is a hands-on player/coach and technical architect. This role reports directly to the Chief Security Officer, is fast-paced, with tight deadlines, after hours expectations, driving tactical and strategic plans including supporting board level initiatives.

Your Opportunity:

• Collaborate with senior members of various groups across Tenable, including Executive Staff and the CEO

• Partner with CSO on special projects, presentations, etc. and proactively represent Security as needed - internally to Tenable and externally 

• Be an active member of the Information Security Leadership team; Work with others on the Security Leadership team to ensure the broader team has strong connections with Tenable; Have an active presence in the office and be readily available to the team

• Outstanding written and verbal communication with demonstrated ability to communicate effectively with all levels of the organization; informal and formal presentations

• Coach, mentor and enable members of the team; Create a positive working environment; Provide project management and leadership support for the team

• Attract strong cyber technical talent and work with each team member to develop their full potential

• Provide off-hours support on an infrequent but as needed basis; including weekends and holidays based on operational tempo

• Recommend, evaluate and deploy security solutions and build associated security programs 

• Identify opportunities to improve the quality and resiliency of cybersecurity systems and applications

• Create documentation and write/review Standard Operating Procedures and Security Policies

• Manage time and technical responsibilities, set accurate expectations and meet deadlines

• Perform Security Architecture reviews and provide Information Security guidance

• Contribute to governance, risk and compliance initiatives via audits, certification and attestations

What You'll Need:

• Ability to lead and mentor a technical team with varying skill level

• Strong Security Architecture experience and knowledge of Security Best Practices and Industry Standards

• Experience with securing Windows, Mac, Linux, mobile devices and 

• Experience with securing IaaS (AWS, GCP, Azure, OCI), SaaS and working with environment owners on resolutions

• Technical understanding and experience with network security technology including IDS and IPS, and network traffic analysis

• Understanding of the TCP/IP protocol stack and application protocols such as HTTP, SNMP, SMTP, DNS, and DHCP 

• Experience with security controls for WAN, LAN, WLAN, VPN, Zero Trust and Cloud architectures

• Hands-on experience and strong knowledge of most of the following technologies: Endpoint Malware Protection/EDR, IDS/IPS, SIEM, Email Security/DMARC, DNS Security, Web Security (Proxy, WAF, DDoS), CASB, DLP, Encryption, PAM, MDM, Posture Management tools (e.g. CNAPP, CSPM, SaaSPM)

• Knowledge of scripting (Python) is preferred but not required

• Knowledge of app