Senior Research Engineer

Tenable is looking for a Senior Research Engineer to join a hybrid function that bridges Security Response and Decision Science Operations within the Research Special Operations group.

Your Role: You will split your time between two complementary missions: responding to high-profile security events and producing external-facing content that positions Tenable as an authority, and applying quantitative analysis and operational design to help Research leadership make better, faster decisions about where to invest effort.

Day to day, you will monitor the threat landscape, coordinate Tenable's end-to-end security response process when a major vulnerability breaks, write blogs and advisories that follow, and then turn around and ask "what does the data tell us about where we should focus next?"

You will work across Research, Public Relations, Marketing, Product, and Program Management to coordinate and deliver actionable business results.

Security Response:

• Monitor the threat landscape, track high-profile events in real time, and research the impact of emerging and existing vulnerabilities
• Champion and drive the Security Response process end to end: brief internal stakeholders, coordinate product coverage across engineering teams, arm PR and community channels with current threat information, and maintain continuous cross-functional engagement throughout an event
• Create and refine technical content including blogs, whitepapers, advisories, conference presentations, and webinars for identified security events
• Respond to media inquiries and customer-driven events as they occur
• Automate the discovery and triage of high-profile events from open-source channels, vendor advisories, and internal telemetry
• Synthesize emergent threat and vulnerability intelligence into actionable items for the appropriate team backlogs

Decision Science Operations:

• Partner with Research leadership to design and execute data-driven frameworks for development and coverage prioritization
• Collaborate with research and product teams to deliver richer contextual intelligence for identified vulnerabilities
• Build and maintain operational dashboards and analytical workflows that surface trends across the threat and vulnerability landscape
• Provide analytical support and timely insights to internal stakeholders to inform product and business decisions

What You'll Need:

• Ability to work in a hybrid/on-site capacity at Tenable headquarters in Columbia, MD
• B.S. or higher in Computer Science, Mathematics, Statistics, Data Science, Operations Research, or a related discipline or 5+ years of equivalent professional experience
• 4+ years of programming and scripting experience (Python, SQL, or comparable)
• Strong working knowledge of common security vulnerabilities, CVSS scoring, vulnerability detection, exploitation techniques, and classification methodologies
• Experience with data analytics platforms and business intelligence tools (e.g., Tableau) and with Python data-science tooling (Jupyter, pandas, etc.)
• Familiarity with internet-facing asset discovery and search platforms such as Shodan and Censys
• Broad understanding of infrastructure fundamentals: networking, common protocols, services, and the general technology landscape
• Demonstrated ability to write technical blogs, whitepapers, and research papers, and to present findings to both technical and non-technical audiences
• Strong organisational skills with the ability to manage multiple concurrent workstreams, prioritise competing demands, and set expectations with stakeholders
• Excellent written and verbal communication skills; comfortable coordinating across highly distributed, cross-functional teams
• Ability to operate independently with minimal supervision while contributing as a collaborative member of the broader research team
• Comfort with agile methodologies and fast-paced, event-driven work

And Ideally:

• Experience with security response, incident coordination, or vulnerability disclosure processes
• Background in exposure management, threat intelligence, or CTEM program support
• Experience building automated data pipelines or integrating intelligence feeds
• Public speaking experience at security conferences (e.g., BSides, RSA, Black Hat)