jobapplier

Senior Security Engineer (Vulnerability Research)

Tanium

Skills

Required

  • Go / C++ / TypeScript / JavaScript / Python
  • native application security
  • source code review / manual application penetration testing / fuzzing
  • frontier models
  • native code security
  • C/C++
  • privileged or agent-based software
  • separate real findings
  • open-source
  • applied cryptography
  • encryption
  • hashing

Preferred

  • cloud platforms
  • AWS / Azure
  • Tanium
  • Hunting for previously-unknown vulnerabilities
  • discover new vulnerabilities

Join Tanium, a leading cybersecurity company, as a Senior Security Engineer in the Vulnerability Research team. In this role, you will be responsible for hunting for previously-unknown vulnerabilities in our software and driving them to remediation. You will apply your deep security expertise to streamline the vulnerability discovery, triage, and remediation processes, and maintain a threat model of Tanium software and services. You will also drive vulnerability research with frontier AI capabilities and build and maintain reliable tooling to support vulnerability research efforts.

Responsibilities

  • Hunting for previously-unknown vulnerabilities in Tanium software and driving them to remediation.
  • Deciding which attack surfaces and bug classes to target, and building the capability needed to discover new vulnerabilities.
  • Maintaining a threat model of Tanium software and services, and using it to direct future vulnerability research projects.

Requirements

  • Bachelor's Degree in Computer Science, or other relevant degree or equivalent experience
  • Experience with the process of developing, building, and shipping secure code
  • 5+ years industry experience, 7+ preferred

Strong understanding of web and native application security

  • Able to read and write code in at least one of: Go, C++, TypeScript/JavaScript, or Python
  • Expertise in determining the severity and exploitability of a vulnerability and its impact to the business
  • Experience with hands-on vulnerability research via source code review, manual application penetration testing, or fuzzing
  • Experience applying frontier models to vulnerability research, and an informed view of where AI accelerates outcomes and where it manufactures noise
  • Experience with native code security (C/C++) in privileged or agent-based software
  • Experience with reachability or exploitability analysis to separate real findings from theoretical ones at scale
  • Published vulnerability research, credited CVEs, bounty findings, open-source security tooling, or conference talks
  • Strong understanding of applied cryptography, including encryption, hashing, and secure key management

Preferred

  • Experience with cloud platforms (AWS or Azure preferred)

Pay

USD 191,000 - 293,000

Every job at Tanium