Senior Security Engineer - Vulnerability Research

Responsibilities

• Select attack surfaces and vulnerability classes for research and build capabilities to discover new vulnerabilities.
• Triage vulnerabilities and rank them by exploitability and business impact.
• Provide high-quality remediation guidance and working pull requests to engineering teams.
• Maintain threat models for Tanium software and services.
• Evaluate frontier AI capabilities and build agentic workflows for vulnerability research.
• Build and maintain AI skills, fuzzing harnesses, and static and dynamic analyzers.
• Reduce false positives and improve finding quality to shorten detection-to-remediation time.
• Perform source-code reviews and targeted security assessments of high-risk components.

Requirements

• Bachelor’s degree in Computer Science or another relevant field, or equivalent experience.
• At least 5 years of industry experience; 7 or more years preferred.
• Strong understanding of web and native application security.
• Hands-on vulnerability research experience through source-code review, manual application penetration testing, or fuzzing.
• Expertise assessing vulnerability severity, exploitability, and business impact.
• Ability to read and write code in at least one of Go, C++, TypeScript/JavaScript, or Python.
• Experience developing, building, and shipping secure code.
• Preferred experience with frontier models, reachability or exploitability analysis, native-code security, AWS or Azure, published vulnerability research, and applied cryptography.

Benefits

• Annual base salary range of $191,000 to $293,000, plus equity awards and a benefits package.
• Medical, dental, vision, family planning, health savings, flexible spending, transportation savings, 401(k) with company match, life, accident, disability, business travel accident, employee assistance, and other well-being benefits.
• Five days of volunteer time off are provided annually.
• The position is full-time; no remote or office arrangement is specified.