AI Information Security Engineer
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). We should include sections only when posting has real, specific content. The posting includes: "Your Role" (description of role), "Your Opportunity" (list of duties), "What You'll Need" (requirements/qualifications), "And Ideally" (nice-to-have), "This is the base pay range..." (Pay), "Tenable also offers a variety of comprehensive and competitive benefits..." (Benefits). Also maybe "Applicants must be authorized to work..." (maybe part of Requirements). Also "We’re committed to promoting Equal Employment Opportunity..." is boilerplate to remove.
We need to not repeat job title as heading. The job title is "AI Security Engineer". Not to be used as heading.
We need to output only HTML fragment, no /, no markdown fences.
We need to use for each section heading. Use - for any list of duties/requirements/benefits. Use
for prose.
We must preserve all substantive information, not invent or summarize away detail. Remove boilerplate, duplicated lines, application instructions.
We need to decide sections: maybe "About the role" (company description?), "Responsibilities" (Your Opportunity), "Requirements" (What You'll Need), "Preferred Qualifications" (And Ideally), "Benefits", "Pay". Possibly also "Schedule" not present, so omit.
We need to ensure we don't create sections with filler like "commensurate with experience". Not present.
We need to include Pay section only if posting states it: yes, "US Pay Range $122,500—$163,166.67 USD". Also mention variable compensation etc. We'll include that.
Benefits: list of benefits.
We need to include "About the role" maybe summarizing company description? The posting includes "Who is Tenable?" and "What makes Tenable such a great place to work?" That's substantive about company. Could be placed under "About the role" or maybe "About Tenable". But the instruction says use headings like About the role, Responsibilities, etc. So we can use "About the role" for company overview. It's okay.
We need to ensure we don't repeat job title as heading. Not using.
We need to remove duplicated lines: The posting repeats some bullet points (e.g., "Perform AI safety, security assessments..." appears twice). We need to preserve all substantive information but not duplicate? The instruction: "Preserve ALL substantive information; do NOT invent or summarize away detail." It doesn't explicitly say to deduplicate, but duplicated lines are considered boilerplate? It says "Remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions." So we should remove duplicated lines. So we need to deduplicate repeated bullet points.
Let's extract content.
Company description:
- "Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey! What makes Tenable such a great place to work? Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together!"
That's substantive.
Applicants must be authorized to work... (visa sponsorship) - that's a requirement, could be part of Requirements.
Your Role: description.
Your Opportunity: list of duties.
What You'll Need: requirements.
And Ideally: nice-to-have.
Pay: base pay range and variable compensation.
Benefits: list.
Now we need to format.
We'll create sections:
About the role
with paragraph(s) containing company description.
Responsibilities
with - list from Your Opportunity (deduplicated).
Requirements
with - list from What You'll Need plus maybe visa requirement.
Preferred Qualifications
(or maybe "And Ideally") with - list.
Benefits
with - list.
Pay
with containing pay range and variable compensation note.
We must not include Schedule.
Now we need to extract bullet points from Your Opportunity.
Your Opportunity text:
"Design, implement, and maintain end-to-end security controls across the AI/ML lifecycle.
Conduct safety research, inspecting model internals (e.g., detecting hidden deception, latent knowledge, or unwanted concepts across layers) as a core methodology.
Perform AI safety assessments and threat modeling for AI/ML systems, identifying risks such as data poisoning, model evasion, model extraction, adversarial inputs, and integrity attacks.
Design and implement robust security guardrails, controls, and boundary mechanisms for Large Language Models (LLMs), Small Language Models (SLMs), and open-source models.
Act as a subject matter expert in AI safety research by inspecting model internals to detect hidden deception, latent knowledge, or unwanted concepts, ensuring highly transparent and aligned AI outputs.
Continuously monitor the AI landscape for novel vulnerabilities and attack techniques, applying deep engineering experience to proactively defend enterprise AI deployments.
Develop security reference architectures for AI deployment patterns, including MCP servers and agentic AI workflows and harnesses.
Deploy controls to ensure model integrity, governance, and proper access control across models and feature stores.
Build AI-driven tooling to strengthen cybersecurity posture across identity, incident management, vulnerability management, third-party risk, and emerging AI threat vectors.
Perform AI safety, security assessments, threat modeling for AI/ML systems, identifying risks such as data poisoning, model evasion, model extraction, adversarial inputs, and integrity attacks.
Collaborate with software engineers, and product teams to integrate security best practices into AI development, training, validation, and deployment processes.
Drive Secure Software Development Lifecycle (SSDLC) and DevSecOps practices for AI-powered products, including threat modeling, security testing, penetration testing, and CI/CD pipeline security automation.
Create security guidance, documentation, and training for internal engineering and development teams; develop metrics that drive desired security behaviors and outcomes.
Research emerging trends in AI security and contribute to innovative solutions that support Tenable's AI initiatives."
We see duplicate: "Perform AI safety assessments and threat modeling..." appears twice (first and later). We'll deduplicate: keep one.
Also "Act as a subject matter expert..." similar to earlier? Not duplicate.
We'll produce list items for each unique bullet.
Now Requirements from What You'll Need:
"5 or more years of professional experience in information security or application security, with at least 1–2 years focused on securing AI/ML systems.
Master’s Degree in Computer Science, Cybersecurity, Data Science, or a related field preferred; advanced degree preferred.
Deep understanding of AI-specific security threats, including adversarial ML, data poisoning, prompt injection, model inversion, model evasion, and inference attacks.
Strong coding experience in Python and/or Go.
Experience with frameworks & libraries such as PyTorch, Hugging Face Transformers, TensorFlow or similar.
Experience using specialized interpretability and probing tools/libraries such as TransformerLens, NNsight, Captum, or LIT (Learning Interpretability Tool).
Familiarity with mechanistic & Architectural Concepts: inspecting internal model states, residual streams, attention patterns, activation steering, Sparse Autoencoders (SAEs), or feature attribution.
Strong understanding of the ML/AI lifecycle and the security risks associated with each stage.
Knowledge of cloud security platforms: AWS, Azure, or GCP including AI/ML-related services.
Knowledge of data security principles, including encryption, masking, and tokenization.
Knowledge of SSDLC, DevSecOps, and security testing practices, including SAST, DAST, SCA, and threat modeling.
Knowledge of application security architecture best practices and patterns, including modern web applications, Docker, and microservices.
Ability to work cross-functionally across engineering, product, and business teams.
Strong written and verbal communication skills; able to clearly translate complex AI security risks for both technical and non-technical audiences.
Strong problem-solving skills, attention to detail, and ability to lead projects with end-to-end ownership.
Self-motivated and effective working independently and across distributed teams."
Also visa requirement: "Applicants must be authorized to work for any employer in the U.S. without sponsorship. We are unable to provide sponsorship for work visas of any kind at the time of hire, or at any point during employment. This includes, but is not limited to: F1-OPT, F1-CPT, H-1B, TN, J-1, etc"
We can include that as a requirement bullet.
Now And Ideally (nice-to-have):
"And Ideally Hands-on experience with AI red teaming, adversarial prompt testing, or LLM security assessments.
Familiarity of AI security frameworks and standards, including OWASP LLM Top 10 and the NIST AI Risk Management Framework.
Experience with application security assessment tools (Burp Suite, ZAP, Tenable WAS, etc).
Familiarity with AI governance frameworks (EU AI Act, NIST AI RMF, etc).
Background in cloud security or large-scale SaaS product environments.
Security certifications: CISSP, CSSLP, SANS GIAC, CEH, or AI-focused security certifications are a plus, but not necessary."
We'll list each as bullet.
Benefits list:
"Tenable also offers a variety of comprehensive and competitive benefits which include: medical, dental, vision, disability and life insurance; 401(k) retirement savings with company match; an employee stock purchase plan; an employee referral program; flexible spending accounts; an Employee Assistance Program (EAP); education assistance; parental leave; paid time off (PTO); company-paid holidays; health and wellness events; and community programs."
We need to split into list items.
Pay:
"This is the base pay range for this position. Compensation for the role will depend on a number of factors, including the candidate's qualifications, skills, competencies, location and experience, and may fall outside of the range shown. Employees are also eligible for variable compensation in addition to base pay (commission for sales roles, bonus for non-sales roles), depending on company and individual performance. US Pay Range $122,500—$163,166.67 USD"
We'll put in
.
Now we need to ensure we don't include boilerplate like EEO etc. Remove.
Now produce HTML.
We'll start with
About the role
then with company description (maybe two paragraphs). We'll keep as one paragraph.
Then
Responsibilities
then with - items.
Then
Requirements
then .
Then Preferred Qualifications
then .
Then Benefits
then .
Then Pay
then .
Make sure no extra whitespace? It's fine.
Now let's craft.
Check for any duplicated lines in responsibilities: we need to ensure we removed duplicate "Perform AI safety assessments and threat
- for any list of duties/requirements/benefits. Use
for prose. We must preserve all substantive information, not invent or summarize away detail. Remove boilerplate, duplicated lines, application instructions. We need to decide sections: maybe "About the role" (company description?), "Responsibilities" (Your Opportunity), "Requirements" (What You'll Need), "Preferred Qualifications" (And Ideally), "Benefits", "Pay". Possibly also "Schedule" not present, so omit. We need to ensure we don't create sections with filler like "commensurate with experience". Not present. We need to include Pay section only if posting states it: yes, "US Pay Range $122,500—$163,166.67 USD". Also mention variable compensation etc. We'll include that. Benefits: list of benefits. We need to include "About the role" maybe summarizing company description? The posting includes "Who is Tenable?" and "What makes Tenable such a great place to work?" That's substantive about company. Could be placed under "About the role" or maybe "About Tenable". But the instruction says use headings like About the role, Responsibilities, etc. So we can use "About the role" for company overview. It's okay. We need to ensure we don't repeat job title as heading. Not using. We need to remove duplicated lines: The posting repeats some bullet points (e.g., "Perform AI safety, security assessments..." appears twice). We need to preserve all substantive information but not duplicate? The instruction: "Preserve ALL substantive information; do NOT invent or summarize away detail." It doesn't explicitly say to deduplicate, but duplicated lines are considered boilerplate? It says "Remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions." So we should remove duplicated lines. So we need to deduplicate repeated bullet points. Let's extract content. Company description: - "Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey! What makes Tenable such a great place to work? Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together!" That's substantive. Applicants must be authorized to work... (visa sponsorship) - that's a requirement, could be part of Requirements. Your Role: description. Your Opportunity: list of duties. What You'll Need: requirements. And Ideally: nice-to-have. Pay: base pay range and variable compensation. Benefits: list. Now we need to format. We'll create sections:
About the role
with paragraph(s) containing company description.Responsibilities
with- list from Your Opportunity (deduplicated).
Requirements
with- list from What You'll Need plus maybe visa requirement.
Preferred Qualifications
(or maybe "And Ideally") with- list.
Benefits
with- list.
Pay
withcontaining pay range and variable compensation note. We must not include Schedule. Now we need to extract bullet points from Your Opportunity. Your Opportunity text: "Design, implement, and maintain end-to-end security controls across the AI/ML lifecycle. Conduct safety research, inspecting model internals (e.g., detecting hidden deception, latent knowledge, or unwanted concepts across layers) as a core methodology. Perform AI safety assessments and threat modeling for AI/ML systems, identifying risks such as data poisoning, model evasion, model extraction, adversarial inputs, and integrity attacks. Design and implement robust security guardrails, controls, and boundary mechanisms for Large Language Models (LLMs), Small Language Models (SLMs), and open-source models. Act as a subject matter expert in AI safety research by inspecting model internals to detect hidden deception, latent knowledge, or unwanted concepts, ensuring highly transparent and aligned AI outputs. Continuously monitor the AI landscape for novel vulnerabilities and attack techniques, applying deep engineering experience to proactively defend enterprise AI deployments. Develop security reference architectures for AI deployment patterns, including MCP servers and agentic AI workflows and harnesses. Deploy controls to ensure model integrity, governance, and proper access control across models and feature stores. Build AI-driven tooling to strengthen cybersecurity posture across identity, incident management, vulnerability management, third-party risk, and emerging AI threat vectors. Perform AI safety, security assessments, threat modeling for AI/ML systems, identifying risks such as data poisoning, model evasion, model extraction, adversarial inputs, and integrity attacks. Collaborate with software engineers, and product teams to integrate security best practices into AI development, training, validation, and deployment processes. Drive Secure Software Development Lifecycle (SSDLC) and DevSecOps practices for AI-powered products, including threat modeling, security testing, penetration testing, and CI/CD pipeline security automation. Create security guidance, documentation, and training for internal engineering and development teams; develop metrics that drive desired security behaviors and outcomes. Research emerging trends in AI security and contribute to innovative solutions that support Tenable's AI initiatives." We see duplicate: "Perform AI safety assessments and threat modeling..." appears twice (first and later). We'll deduplicate: keep one. Also "Act as a subject matter expert..." similar to earlier? Not duplicate. We'll produce list items for each unique bullet. Now Requirements from What You'll Need: "5 or more years of professional experience in information security or application security, with at least 1–2 years focused on securing AI/ML systems. Master’s Degree in Computer Science, Cybersecurity, Data Science, or a related field preferred; advanced degree preferred. Deep understanding of AI-specific security threats, including adversarial ML, data poisoning, prompt injection, model inversion, model evasion, and inference attacks. Strong coding experience in Python and/or Go. Experience with frameworks & libraries such as PyTorch, Hugging Face Transformers, TensorFlow or similar. Experience using specialized interpretability and probing tools/libraries such as TransformerLens, NNsight, Captum, or LIT (Learning Interpretability Tool). Familiarity with mechanistic & Architectural Concepts: inspecting internal model states, residual streams, attention patterns, activation steering, Sparse Autoencoders (SAEs), or feature attribution. Strong understanding of the ML/AI lifecycle and the security risks associated with each stage. Knowledge of cloud security platforms: AWS, Azure, or GCP including AI/ML-related services. Knowledge of data security principles, including encryption, masking, and tokenization. Knowledge of SSDLC, DevSecOps, and security testing practices, including SAST, DAST, SCA, and threat modeling. Knowledge of application security architecture best practices and patterns, including modern web applications, Docker, and microservices. Ability to work cross-functionally across engineering, product, and business teams. Strong written and verbal communication skills; able to clearly translate complex AI security risks for both technical and non-technical audiences. Strong problem-solving skills, attention to detail, and ability to lead projects with end-to-end ownership. Self-motivated and effective working independently and across distributed teams." Also visa requirement: "Applicants must be authorized to work for any employer in the U.S. without sponsorship. We are unable to provide sponsorship for work visas of any kind at the time of hire, or at any point during employment. This includes, but is not limited to: F1-OPT, F1-CPT, H-1B, TN, J-1, etc" We can include that as a requirement bullet. Now And Ideally (nice-to-have): "And Ideally Hands-on experience with AI red teaming, adversarial prompt testing, or LLM security assessments. Familiarity of AI security frameworks and standards, including OWASP LLM Top 10 and the NIST AI Risk Management Framework. Experience with application security assessment tools (Burp Suite, ZAP, Tenable WAS, etc). Familiarity with AI governance frameworks (EU AI Act, NIST AI RMF, etc). Background in cloud security or large-scale SaaS product environments. Security certifications: CISSP, CSSLP, SANS GIAC, CEH, or AI-focused security certifications are a plus, but not necessary." We'll list each as bullet. Benefits list: "Tenable also offers a variety of comprehensive and competitive benefits which include: medical, dental, vision, disability and life insurance; 401(k) retirement savings with company match; an employee stock purchase plan; an employee referral program; flexible spending accounts; an Employee Assistance Program (EAP); education assistance; parental leave; paid time off (PTO); company-paid holidays; health and wellness events; and community programs." We need to split into list items. Pay: "This is the base pay range for this position. Compensation for the role will depend on a number of factors, including the candidate's qualifications, skills, competencies, location and experience, and may fall outside of the range shown. Employees are also eligible for variable compensation in addition to base pay (commission for sales roles, bonus for non-sales roles), depending on company and individual performance. US Pay Range $122,500—$163,166.67 USD" We'll put in
. Now we need to ensure we don't include boilerplate like EEO etc. Remove. Now produce HTML. We'll start with
About the role
thenwith company description (maybe two paragraphs). We'll keep as one paragraph. Then
Responsibilities
then- with
- items.
Then
Requirements
then- .
Then
Preferred Qualifications
then- .
Then
Benefits
then- .
Then
Pay
then. Make sure no extra whitespace? It's fine. Now let's craft. Check for any duplicated lines in responsibilities: we need to ensure we removed duplicate "Perform AI safety assessments and threat
- items.
Then
- list.
- list.
- list from What You'll Need plus maybe visa requirement.
- list from Your Opportunity (deduplicated).