Senior Security Engineer - Vulnerability Research
Tanium · Remote, US
About this role
**Senior Security Engineer — Vulnerability Research (Tanium)** ## The Basics Tanium is looking for a Security Engineer to join the **Vulnerability Research** team within the **R&D Security** organization. This team protects the software and cloud services customers depend on by **hunting for previously-unknown vulnerabilities** and driving them to remediation before attackers can exploit them. In this role, you’ll continuously raise the bar for attackers by making vulnerabilities in Tanium software **harder and more expensive to find**. Tanium is leveraging frontier models and building **agentic security workflows** to scale and accelerate the find-and-fix loop. You’ll apply deep security expertise to decide what to hunt for and streamline vulnerability discovery, triage, and remediation. ## What you’ll do - Decide which **attack surfaces** and **bug classes** to pursue, and build capabilities to discover new vulnerabilities - **Triage** newly discovered vulnerabilities quickly and accurately, ranking by **exploitability** and **real impact** - Provide high-quality **patch guidance** and work pull requests alongside engineering in addition to vulnerability reports - Maintain a **threat model** of Tanium software and services to guide future research - Drive vulnerability research using **frontier AI capabilities** by evaluating what’s possible with in-house and third-party tooling and building agentic workflows around what works - Build and maintain reliable tooling to support research (e.g., **AI skills**, **fuzzing harnesses**, **static/dynamic analyzers**) - Shorten time from **detection to remediation** by reducing false positives and improving finding quality - Perform **source code review** and targeted security assessment of high-risk components ## We’re looking for someone with ### Education - Bachelor’s Degree in Computer Science (or other relevant degree) or equivalent experience ### Experience - **5+ years** industry experience (**7+ preferred**) - Strong understanding of **web and native application security** - Hands-on vulnerability research experience via **source code review**, **manual application penetration testing**, or **fuzzing** - Expertise determining **severity**, **exploitability**, and business impact - Ability to read and write code in at least one of: **Go, C++, TypeScript/JavaScript, or Python** - Experience developing, building, and shipping **secure code** ## Nice to have - Experience applying frontier models to vulnerability research, including where AI accelerates outcomes vs. where it creates noise - Experience with **reachability** or **exploitability analysis** to separate real findings from theoretical ones at scale - Native code security experience (C/C++) in privileged or agent-based software - Experience with **cloud platforms** (AWS or Azure preferred) - Published vulnerability research, credited **CVEs**, bounty findings, open-source security tooling, or conference talks - Strong understanding of applied **cryptography** (encryption, hashing, secure key management) ## About Tanium Tanium is the **Autonomous IT** company. As AI accelerates both innovation and risk, Tanium Atlas (the company’s autonomous operating system) brings the Tanium Autonomous IT Platform to help IT and security operators detect, decide, and remediate at machine speed across endpoint estates. ## What you’ll get - Estimated annual base salary range: **$191,000–$293,000** (final offer may vary by factors including lo
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.