Senior Security Engineer (Customer Transparency)

• Tanium is looking for a Senior Security Engineer to join the Customer Transparency team within the R&D Security organization, which protects the software and cloud services our customers depend on
• Tanium’s customers secure some of the most consequential networks in the world and they extend us a great deal of trust
• The Customer Transparency team is responsible for making Tanium’s security posture something our customers can understand and act on, rather than something they have to blindly trust
• As a Senior Security Engineer on the Customer Transparency team, you will represent Tanium’s R&D Security organization to our external stakeholders
• You will be responsible for our vulnerability disclosure program, developing a deep understanding of customers’ security needs, and taking action to drive these to resolution
• Build and maintain security tooling, leveraging AI where possible to streamline security processes
• Identify what customers can’t see about their own Tanium deployment and partner with Engineering and Product stakeholders to close those gaps
• Oversee the SBOM and vulnerability management program and provide appropriate visibility to internal and external stakeholders
• Collaborate with Customers, Partners, and Tanium’s Customer organization to learn what customers actually need, treat recurring questions as engineering problems, and build the systems that solve them
• Act as a security technical resource for customer-facing teams: answer inbound security inquiries and escalations, maintain a library of reusable answers, interface directly with customers when needed
• Administer Tanium’s bug bounty program: triage inbound reports against SLA, assess the exploitability and severity of reported issues, adjudicate duplicates and out-of-scope submissions, recommend awards, and foster productive relationships with researchers
• Author and publish Tanium Security Advisories and CVE records, including CWE classification and CVSS scoring
• Coordinate disclosure timing and embargoes across researchers, customers, partners, and external coordinating bodies

Benefits

• Volunteer time off
• Work from home opportunities
• Equity awards
• Generous benefits package consisting of medical, dental and vision plan
• Health savings account
• Family planning benefits
• Flexible spending account
• Transportation savings account
• 401(k) retirement savings plan
• Business travel accident insurance
• Employee assistance programs
• Disability insurance- Bachelor’s Degree in Computer Science, or other relevant degree or equivalent experience
• Experience applying AI tooling to security work, with an informed view of where it helps and where it manufactures noise
• 5+ years industry experience, 7+ preferred
• Experience determining the severity and exploitability of a vulnerability and their impact to the business
• Experience interacting with customers and external security researchers
• Experience with product and application security, vulnerability research, or software engineering with a substantial security focus
• Experience building tools or data interfaces used by external stakeholders, including support and customers
• Experience with modern software engineering development and automation tools like git and CI/CD pipelines
• Excellent oral and written communication skills
• Ability to work in a fast-paced, changing environment
• Team player
• Person of high ethics and integrity
• Demonstrates initiative and motivation
• Experience running, or substantially supporting, a bug bounty program or VDP
• Published vulnerability research, credited CVEs, bug bounty findings, open-source security tooling, or conference talks
• Strong understanding of applied cryptography, including encryption, hashing, and secure key management
• Experience with coordinated vulnerability disclosure and the mechanics of CVE assignment, CVSS, and CWE; CNA operations experience
• Working knowledge of Tanium’s products and services
• Familiarity with SCA/SBOM tooling and third-party dependency vulnerability management