Tanium Security Engineer

Tanium Security Engineer

Duration: 12+ months contract

Location: Charlotte, NC - hybrid; onsite 4 days, remote 1 day

Required Skills:

• Must have 5+ years of security engineering/cyber security experience
• Must have 2+ years of Tanium experience (Patch, Deploy, Comply, and more)
• Must have strong communication skills
• Must be able to work independently with little training

We are seeking a Security Engineer with strong Tanium expertise to support and advance a critical security implementation initiative. This role will focus on the end-to-end deployment, optimization, and ongoing management of Tanium within a highly secure environment. The ideal candidate brings hands-on experience implementing Tanium from the ground up, with deep knowledge across key modules including Patch, Deploy, Threat Response, and Comply. This engineer will play a vital role in maintaining the security posture of a complex infrastructure and ensuring operational resilience in the event of cyber incidents.

You will work closely with a small team of security engineers, supporting a medium-sized enterprise environment with hundreds of endpoints and critical data center infrastructure.

Day-to-Day Responsibilities

• Lead and support the ongoing implementation and optimization of Tanium across the environment
• Configure and manage key Tanium modules: Patch, Deploy, Threat Response, and Comply
• Execute continuous patching and vulnerability remediation efforts across endpoints and servers
• Monitor and respond to security incidents using Tanium and other tools
• Develop and maintain automation scripts (PowerShell/Python) for operational efficiency
• Manage endpoint configurations and ensure compliance with internal security policies
• Work within an air-gapped (offline) environment, including handling manual updates and secure data transfers
• Collaborate with 2 other security engineers to manage and secure approximately:
• Hundreds of endpoints
• 100–120 racks of server infrastructure
• Support identity and privileged access management using tools such as CyberArk
• Act as a key contributor in maintaining business continuity and disaster recovery readiness, ensuring systems remain operational during security incidents
• Assist in strengthening overall security posture across infrastructure, endpoints, and data centers

Qualifications Required:

• Proven experience as a Security Engineer or Endpoint Security Engineer
• Hands-on experience with Tanium, including full or large-scale implementation
• Strong working knowledge of:
• Tanium Patch, Deploy, Threat Response, and Comply modules
• Experience working in high-security or air-gapped environments
• Proficiency in scripting and automation: PowerShell and/or Python
• Experience with vulnerability management and patching strategies
• Familiarity with CyberArk or other Privileged Access Management (PAM) tools
• Strong understanding of endpoint