Senior Security Engineer - Vulnerability Research

Career Tools

About This Role

Tanium is recruiting a senior security engineer for its Vulnerability Research unit, which operates within the R&D Security group. The unit searches Tanium's software for undiscovered weaknesses and pushes for their repair before adversaries can exploit them. The company brands itself as the Autonomous IT firm and says large enterprises and public-sector bodies rely on it for complex IT operations. This is a hands-on position. The engineer selects the target…

Job Description

Responsibilities

• Decide which weakness classes and product surfaces deserve attention, and build the tools needed to uncover new flaws.
• Sort newly found issues quickly by how easily they can be abused and how much damage they could do.
• Write remediation advice and working code changes to accompany each vulnerability report.
• Maintain a threat model covering Tanium's products and cloud offerings, guiding what the team researches next.
• Create and maintain research tooling such as fuzzing harnesses, static and dynamic analyzers, and AI skills.
• Cut false positives and raise finding quality so fixes arrive sooner.
• Review source code and run focused assessments on the riskiest components.

Requirements

• Five or more years of industry experience, seven or more preferred.
• Strong grasp of web-app and native-app security.
• Demonstrated vulnerability research through source review, manual testing or fuzzing.
• Proficiency judging how severe and exploitable a flaw is and what it means for the business.
• Coding skill across Python, TypeScript/JavaScript, Go or C++, enough to read and write production code.
• Practical experience shipping secure software through build and release processes.

Qualifications

• Hands-on work with frontier AI models in vulnerability research.
• Reachability or exploitability analysis at scale.
• Security work on native C/C++ code in privileged or agent software.
• Cloud experience, with AWS or Azure preferred.
• Public track record: published research, credited CVEs, bounties, open-source security projects or conference talks.
• Working knowledge of applied cryptography, such as encryption, hashing and key handling.

Core Skills

Benefits

• Medical, dental and vision coverage with family planning support.
• Health savings and flexible spending accounts.
• Commuting and transportation savings account.
• Retirement plan (401(k)) with matching contributions.
• Life, accident and disability protection, plus business travel accident cover.
• Employee assistance programs and wellness benefits.
• Equity awards and five days of paid volunteer time off each year.

Frequently Asked Questions

Answers are based only on the employer’s listing; where it doesn’t say, neither do we.

Sample Interview Questions

AI-generated questions tailored to this specific role — a preview of the full practice set.