Senior Security Engineer – Vulnerability Research

Tanium

. Decide which attack surfaces and bug classes to target and build capabilities to discover new vulnerabilities .

Posted 10/8/2026full-timeRemote • United StatesSenior💰 $191,000 - $293,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in vulnerability research, including source code review and application penetration testing, while effectively applying advanced AI models and tools to enhance security measures. Proficient in secure coding practices and understanding of web and native application security, with a strong focus on reducing detection-to-remediation time.

Highest-signal resume keywords

Vulnerability ResearchSource Code ReviewApplication Penetration TestingSecure Coding PracticesApplied Cryptography

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability AssessmentExploitability AnalysisFuzzingGo ProgrammingC++ ProgrammingTypeScript ProgrammingPython ProgrammingCloud SecurityStatic AnalysisDynamic Analysis

Tools & Technologies

TaniumAWSAzureAI ToolsFuzzing HarnessesStatic AnalyzersDynamic Analyzers

Industry Keywords

Web Application SecurityNative Application SecurityCryptographyVulnerability ManagementSecurity Assessments

Tech Stack

Tools & technologies

AWSAzureCloudJavaScriptPythonTypeScriptC++Go

About the role

Key responsibilities & impact

Decide which attack surfaces and bug classes to target and build capabilities to discover new vulnerabilities
Triage newly discovered vulnerabilities, ranking them by exploitability and business impact
Provide engineering with patch guidance and working pull requests alongside vulnerability reports
Maintain a threat model of Tanium software and services
Drive vulnerability research using frontier AI capabilities, in-house and third-party tooling, and agentic workflows
Build and maintain vulnerability research tooling, including AI skills, fuzzing harnesses, and static and dynamic analyzers
Reduce detection-to-remediation time by lowering false positives and improving finding quality
Perform source code reviews and targeted security assessments of high-risk components

Requirements

What you’ll need

Bachelor's Degree in Computer Science, or other relevant degree or equivalent experience
5+ years industry experience (7+ preferred)
Strong understanding of web and native application security
Hands-on vulnerability research experience via source code review, manual application penetration testing, or fuzzing
Expertise in determining vulnerability severity, exploitability, and business impact
Ability to read and write code in at least one of Go, C++, TypeScript/JavaScript, or Python
Experience developing, building, and shipping secure code
Experience applying frontier models to vulnerability research
Experience with reachability or exploitability analysis
Experience with native code security (C/C++) in privileged or agent-based software
Experience with cloud platforms; AWS or Azure preferred
Published vulnerability research, credited CVEs, bounty findings, open-source security tooling, or conference talks
Strong understanding of applied cryptography, including encryption, hashing, and secure key management

Benefits

Comp & perks

Equity awards
Medical, dental and vision plan
Family planning benefits
Health savings account
Flexible spending account
Transportation savings account
401(k) retirement savings plan with company match
Life, accident and disability coverage
Business travel accident insurance
Employee assistance programs
Disability insurance
Other well-being benefits
5 days of volunteer time off (VTO)