Senior Security Engineer - Vulnerability Research

Tanium is looking for a security engineer to join the Vulnerability Research team within the R&D Security organization, which protects the software and cloud services customers depend on.

In this role, you will continuously raise the bar for attackers, making vulnerabilities in Tanium software harder and more expensive to find. You will apply deep security expertise to decide what to hunt for and streamline vulnerability discovery, triage, and remediation processes.

Responsibilities:

• Decide which attack surfaces and bug classes to target and build capabilities to discover new vulnerabilities
• Triage newly discovered vulnerabilities quickly and accurately, ranking them by exploitability and actual impact
• Provide high-quality patch guidance and work on pull requests in addition to vulnerability reports
• Maintain a threat model of Tanium software and services to direct future vulnerability research projects
• Drive vulnerability research with frontier AI capabilities and build agentic workflows
• Build and maintain reliable tooling to support vulnerability research efforts
• Shorten the time from detection to remediation by reducing false positives and improving finding quality
• Perform source code review and targeted security assessments of high-risk components

Requirements:

• Bachelor's Degree in Computer Science or equivalent experience
• 5+ years of industry experience, 7+ preferred
• Strong understanding of web and native application security
• Experience with hands-on vulnerability research via source code review, manual application penetration testing, or fuzzing
• Expertise in determining vulnerability severity and exploitability
• Proficiency in at least one of: Go, C++, TypeScript/JavaScript, or Python

Nice to have:

• Experience applying frontier models to vulnerability research
• Experience with reachability or exploitability analysis
• Experience with native code security (C/C++)
• Experience with cloud platforms (AWS or Azure preferred)
• Published vulnerability research, credited CVEs, or open-source security tooling

Benefits:

• Annual base salary range: $191,000 to $293,000
• Equity awards
• Medical, dental, and vision plans
• Family planning benefits
• Health savings account
• Flexible spending account
• Transportation savings account
• 401(k) retirement savings plan with company match
• Life, accident, and disability coverage
• Business travel accident insurance
• Employee assistance programs
• Disability insurance
• Other well-being benefits