[Hiring] Senior Security Engineer @Tanium

Role Description

Tanium is looking for a Senior Security Engineer to join the Customer Transparency team within the R&D Security organization, which protects the software and cloud services our customers depend on. As a Senior Security Engineer on the Customer Transparency team, you will represent Tanium’s R&D Security organization to our external stakeholders. You will be responsible for our vulnerability disclosure program, developing a deep understanding of customers’ security needs, and taking action to drive these to resolution.

• Build and maintain security tooling, leveraging AI where possible to streamline security processes
• Identify what customers can't see about their own Tanium deployment and partner with Engineering and Product stakeholders to close those gaps
• Oversee the SBOM and vulnerability management program and provide appropriate visibility to internal and external stakeholders
• Collaborate with Customers, Partners, and Tanium's Customer organization to learn what customers actually need, treat recurring questions as engineering problems, and build the systems that solve them
• Act as a security technical resource for customer-facing teams: answer inbound security inquiries and escalations, maintain a library of reusable answers, interface directly with customers when needed
• Administer Tanium's bug bounty program: triage inbound reports against SLA, assess the exploitability and severity of reported issues, adjudicate duplicates and out-of-scope submissions, recommend awards, and foster productive relationships with researchers
• Author and publish Tanium Security Advisories and CVE records, including CWE classification and CVSS scoring
• Coordinate disclosure timing and embargoes across researchers, customers, partners, and external coordinating bodies

Qualifications

• Bachelor's Degree in Computer Science, or other relevant degree or equivalent experience
• 5+ years industry experience, 7+ preferred
• Experience with product and application security, vulnerability research, or software engineering with a substantial security focus
• Experience interacting with customers and external security researchers
• Experience applying AI tooling to security work, with an informed view of where it helps and where it manufactures noise
• Experience building tools or data interfaces used by external stakeholders, including support and customers
• Experience with modern software engineering development and automation tools like git and CI/CD pipelines
• Experience determining the severity and exploitability of a vulnerability and their impact to the business

Requirements

• Familiarity with SCA/SBOM tooling and third-party dependency vulnerability management
• Experience with coordinated vulnerability disclosure and the mechanics of CVE assignment, CVSS, and CWE; CNA operations experience
• Experience running, or substantially supporting, a bug bounty program or VDP
• Published vulnerability research, credited CVEs, bug bounty findings, open-source security tooling, or conference talks
• Working knowledge of Tanium’s products and services
• Strong understanding of applied cryptography, including encryption, hashing, and secure key management

Core Competencies

• Demonstrates initiative and motivation
• Excellent oral and written communication skills
• Team player
• Person of high ethics and integrity
• Ability to work in a fast-paced, changing environment

Benefits

• The annual base salary range for this full-time position is $191,000 to $293,000.
• In addition to an annual base salary, team members will receive equity awards and a generous benefits package consisting of:
• Medical, dental and vision plan
• Family planning benefits
• Health savings account
• Flexible spending account
• Transportation savings account
• 401(k) retirement savings plan with company match
• Life, accident and disability coverage
• Business travel accident insurance
• Employee assistance programs
• Disability insurance
• Other well-being benefits