8 hours ago
Base Salary
$191k - $293k/yr
Responsibilities
- Select attack surfaces and vulnerability classes for research and build capabilities to discover new vulnerabilities.
- Triage vulnerabilities and rank them by exploitability and business impact.
- Provide high-quality remediation guidance and working pull requests to engineering teams.
- Maintain threat models for Tanium software and services.
- Evaluate frontier AI capabilities and build agentic workflows for vulnerability research.
- Build and maintain AI skills, fuzzing harnesses, and static and dynamic analyzers.
- Reduce false positives and improve finding quality to shorten detection-to-remediation time.
- Perform source-code reviews and targeted security assessments of high-risk components.
Requirements
- Bachelor’s degree in Computer Science or another relevant field, or equivalent experience.
- At least 5 years of industry experience; 7 or more years preferred.
- Strong understanding of web and native application security.
- Hands-on vulnerability research experience through source-code review, manual application penetration testing, or fuzzing.
- Expertise assessing vulnerability severity, exploitability, and business impact.
- Ability to read and write code in at least one of Go, C++, TypeScript/JavaScript, or Python.
- Experience developing, building, and shipping secure code.
- Preferred experience with frontier models, reachability or exploitability analysis, native-code security, AWS or Azure, published vulnerability research, and applied cryptography.
Benefits
- Annual base salary range of $191,000 to $293,000, plus equity awards and a benefits package.
- Medical, dental, vision, family planning, health savings, flexible spending, transportation savings, 401(k) with company match, life, accident, disability, business travel accident, employee assistance, and other well-being benefits.
- Five days of volunteer time off are provided annually.
- The position is full-time; no remote or office arrangement is specified.
Tech Stack
Categories
About Tanium
Tanium builds an enterprise platform for unified endpoint management and security, combining real-time asset discovery, patching, vulnerability management, and EDR for IT and security teams. It sells subscriptions and services to large organizations that need fleet-wide visibility and control across Windows, macOS, Linux, and cloud endpoints. Founded in 2007 and headquartered in Bellevue, Washington, the privately held company reports securing over 32 million endpoints globally.