Senior Security Engineer, Customer Transparency

What you'll do

• Build and maintain security tooling, using AI where possible, and work with Engineering and Product to address customer visibility gaps.
• Oversee SBOM and vulnerability management; administer the bug bounty program and assess reported vulnerabilities.
• Respond to customer security inquiries, publish security advisories and CVE records, and coordinate disclosure timing with relevant stakeholders.

What they ask for

• Experience in product and application security, vulnerability research, or software engineering with a substantial security focus.
• Experience interacting with customers and external security researchers.
• Experience applying AI tooling to security work and building tools or data interfaces for external stakeholders.
• Experience assessing vulnerability severity and exploitability, and using modern development and automation tools such as git and CI/CD pipelines.

Nice to have

• Familiarity with SCA/SBOM tooling, coordinated vulnerability disclosure, CVE assignment, CVSS, CWE, CNA operations, or bug bounty/VDP programs.
• Published vulnerability research, credited CVEs, bug bounty findings, open-source security tooling, or conference talks; Tanium product knowledge or applied cryptography.

Pay

$191,000 to $293,000 USD base salary

Tools

AI, SCA/SBOM, git, CI/CD, CVE, CVSS, CWE

AI focus

Apply AI tooling to security work and streamline security processes where useful, while recognizing where AI may produce noise.