Senior Security Engineer - Vulnerability Research

5 hours, 36 minutes ago
Full-time
Senior
Software Development
Tanium

Tanium

Tanium is a leading provider of security and systems management solutions, offering real-time data collection at enterprise scale. Their Converged Endpoint Management (XEM) platform enables organizations to see, control, and protect every endpoint, eve...

Internet Software & Services
1K-5K
Founded 2007
$1000M raised

Description

  • Select attack surfaces and bug classes for research and build capabilities to uncover vulnerabilities.
  • Triage vulnerabilities and rank them by exploitability, severity, and business impact.
  • Provide engineering teams with patch guidance, vulnerability reports, and working pull requests.
  • Maintain threat models for Tanium software and services to guide research priorities.
  • Evaluate frontier AI tools and build agentic workflows for vulnerability discovery and remediation.
  • Build and maintain vulnerability research tooling, including AI skills, fuzzing harnesses, and static and dynamic analyzers.
  • Reduce detection-to-remediation time by lowering false positives and improving finding quality.
  • Perform source-code reviews and targeted security assessments of high-risk components.

Requirements

  • Bachelor’s degree in Computer Science or a related field, or equivalent experience.
  • 5+ years of industry experience; 7+ years preferred.
  • Strong understanding of web and native application security.
  • Hands-on vulnerability research experience through source-code review, manual penetration testing, or fuzzing.
  • Expertise assessing vulnerability severity, exploitability, and business impact.
  • Ability to read and write at least one of Go, C++, TypeScript/JavaScript, or Python.
  • Experience developing, building, and shipping secure code.
  • Experience applying frontier models to vulnerability research, preferred.
  • Experience with reachability or exploitability analysis at scale, preferred.
  • Experience with native-code security, AWS or Azure, published vulnerability research, and applied cryptography, preferred.

Benefits

  • Annual base salary of $191,000–$293,000.
  • Equity awards.
  • Medical, dental, and vision insurance.
  • Family planning benefits, HSA, FSA, and transportation savings account.
  • 401(k) retirement plan with company match.
  • Life, accident, disability, travel accident, and employee assistance coverage.
  • Five days of volunteer time off annually.
  • Additional well-being benefits.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Middle+/Senior DevSecOps Engineer | TechCore

Boosta 501-1000 information technology & services

Boosta is hiring a Middle+/Senior DevSecOps Engineer for its service team to secure and support infrastructure and digital projects across the holding.

AWS Azure Bash CI/CD Cloudflare DNS Docker GCP GitHub Actions GitLab CI HashiCorp Vault Helm JavaScript Jenkins Kubernetes Python SIEM SOC SonarQube Terraform TLS WAF
5 hours, 5 minutes ago

Head of Infrastructure & Cloud Security

JustMarkets 1-10 Capital Markets

Head of Infrastructure & Cloud Security leading a security operations function across cloud, network, identity, endpoint, and data domains while advancing secure hybrid and cloud-first infrastructure.

Cybersecurity Encryption Kubernetes Network Security Secrets Management
5 hours, 21 minutes ago

Senior DevSecOps Engineer (Cloud Security / AI Platforms)

Gramian Consultancy Group Professional Services

As a Senior DevSecOps Engineer for a Big4 consultancy serving financial institutions, you will build and secure cloud infrastructure that enables production AI, automation, analytics, and financial crime prevention solutions.

AWS Azure CI/CD DevSecOps Docker Kubernetes Penetration Testing Terraform
5 hours, 51 minutes ago

Senior Security Engineer

European Dynamics 251-1K IT Services

European Dynamics is seeking a remote Senior Security Engineer to develop, integrate, and operate secure, resilient cybersecurity solutions while collaborating with a major client’s IT team and an international European Institution.

Agile Cybersecurity DevSecOps Encryption JWT Linux Network Security OAuth OpenID Connect SAML TCP/IP Unix
5 hours, 51 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers