Senior Security Engineer - Vulnerability Research

A senior security engineer on the Vulnerability Research team in Tanium's R&D Security organisation, hunting for unknown flaws in Tanium's software and cloud services and getting them fixed before attackers find them. The engineer picks the attack surfaces and kinds of bug worth pursuing, keeps a threat model of the products to steer research, reviews source code and assesses high-risk components, triages findings by real exploitability, and hands engineers patch guidance and working pull requests. A big part of the job is building agentic research workflows on frontier AI models, plus fuzzing harnesses and analysers, while cutting false positives.

Tanium wants five or more years of experience, strong web and native application security knowledge, hands-on research through code review, pen testing or fuzzing, and code in Go, C++, TypeScript or Python. Remote in the US.