SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 191,000 - 293,000 / annual
Tanium is seeking a Senior Security Engineer to join the Vulnerability Research team within the R&D Security organization. The team is responsible for proactively hunting for previously-unknown vulnerabilities in Tanium's software and cloud services before attackers can exploit them, protecting some of the most consequential networks in the world.
In this role, you will continuously raise the bar for attackers by making vulnerabilities harder and more expensive to find. You'll work at the intersection of deep security expertise and frontier AI capabilities, leveraging advanced models and agentic security workflows to scale and accelerate the vulnerability discovery, triage, and remediation cycle.
Key responsibilities include:
- Decide which attack surfaces and bug classes to prioritize and build the capability to discover new vulnerabilities
- Triage newly discovered vulnerabilities quickly and accurately, ranking by exploitability and actual business impact
- Provide high-quality patch guidance and working pull requests to engineering teams to make remediation easy
- Maintain a threat model of Tanium software and services to direct future research projects
- Drive vulnerability research using frontier AI capabilities by evaluating in-house and third-party tooling and building agentic workflows
- Build and maintain reliable tooling for vulnerability research, including AI skills, fuzzing harnesses, and static/dynamic analyzers
- Shorten detection-to-remediation time by reducing false positives and improving finding quality
- Perform source code review and targeted security assessment of high-risk components
Tanium is the Autonomous IT company, recognized as a Leader in the 2026 Gartner Magic Quadrant for Endpoint Management Tools and on the Forbes Cloud 100 list for ten consecutive years. The company provides real-time intelligence, agentic decision-making, and autonomous execution capabilities for IT and security operators.
Requirements:
- Bachelor's degree in Computer Science or relevant degree/equivalent experience
- 5+ years industry experience (7+ preferred)
- Strong understanding of web and native application security
- Hands-on vulnerability research experience via source code review, manual penetration testing, or fuzzing
- Expertise in determining vulnerability severity, exploitability, and business impact
- Ability to read and write code in at least one of: Go, C++, TypeScript/JavaScript, or Python
- Experience with the process of developing, building, and shipping secure code
Nice to have:
- Experience applying frontier models to vulnerability research with informed perspective on where AI accelerates outcomes vs. manufactures noise
- Experience with reachability or exploitability analysis to separate real findings from theoretical ones at scale
- Native code security experience (C/C++) in privileged or agent-based software
- Cloud platform experience (AWS or Azure preferred)
- Published vulnerability research, credited CVEs, bounty findings, open-source security tooling, or conference talks
- Strong understanding of applied cryptography including encryption, hashing, and secure key management
