Senior Security Engineer (Vulnerability Research)

Join Tanium, a leading cybersecurity company, as a Senior Security Engineer in the Vulnerability Research team. In this role, you will be responsible for hunting for previously-unknown vulnerabilities in our software and driving them to remediation. You will apply your deep security expertise to streamline the vulnerability discovery, triage, and remediation processes, and maintain a threat model of Tanium software and services. You will also drive vulnerability research with frontier AI capabilities and build and maintain reliable tooling to support vulnerability research efforts.

• Hunting for previously-unknown vulnerabilities in Tanium software and driving them to remediation.
• Deciding which attack surfaces and bug classes to target, and building the capability needed to discover new vulnerabilities.
• Maintaining a threat model of Tanium software and services, and using it to direct future vulnerability research projects.

• Bachelor's Degree in Computer Science, or other relevant degree or equivalent experience
• Experience with the process of developing, building, and shipping secure code
• 5+ years industry experience, 7+ preferred
• Strong understanding of web and native application security
• Able to read and write code in at least one of: Go, C++, TypeScript/JavaScript, or Python
• Expertise in determining the severity and exploitability of a vulnerability and its impact to the business
• Experience with hands-on vulnerability research via source code review, manual application penetration testing, or fuzzing
• Experience applying frontier models to vulnerability research, and an informed view of where AI accelerates outcomes and where it manufactures noise
• Experience with native code security (C/C++) in privileged or agent-based software
• Experience with reachability or exploitability analysis to separate real findings from theoretical ones at scale
• Published vulnerability research, credited CVEs, bounty findings, open-source security tooling, or conference talks
• Experience with cloud platforms (AWS or Azure preferred)
• Strong understanding of applied cryptography, including encryption, hashing, and secure key management