Product Security Engineer (Bug Bounty)

The Basics:

The Product Security Engineer will be responsible for ensuring that Tanium provides software and services that meet the high security standard of our customers. This role is focused on the management of Tanium's responsible disclosure (bug bounty) program. The Product Security Engineer may also take ownership of special projects such as security enhancements to the Tanium codebase or creation of internal tooling that aim at improving the overall security posture of Tanium software. In addition, the Product Security Engineer will perform research on industry trends and developments and share such perspectives in appropriate forums.   What you'll do:

• Maturing Tanium's bug bounty program to establish guidelines for scope and response timelines.
• Manage and oversee the bug bounty program, including triaging vulnerability reports, validating findings, communicating with external security researchers, and coordinating with internal teams to ensure timely resolution.
• Develop infrastructure and tooling to enable 3rd party researchers to effectively test Tanium products.
• Analyze data, identify trends, and provide recommendations for internal teams to make it easier to ship secure code and harder to ship insecure code.
• Develop and share research in the area of product security and vulnerability management.

What we're looking for:

• Education
  • Bachelor’s Degree or equivalent work experience
• Experience
  • 3+ years relevant work experience preferred
• Other
  • Expertise in determining the severity of a vulnerability and their impact to the business
  • Expertise with common security testing methodologies
  • Strong communication skills with external stakeholders
  • Strong understanding of web and native application security
  • Experience in manual and automated pen testing 
  • Experience performing source code reviews
  • Experience with using Burp Suite or similar tools
  • Experience with Cloud Platform (AWS or Azure preferred)
  • Experience with at least one of the following programming languages: Golang, JavaScript, Node.js, TypeScript, C++, React, Python (to perform source code reviews)
  • Experience with the process of developing, building, and shipping secure code
  • Experience with bug bounty platforms (e.g., HackerOne, Bugcrowd) and vulnerability management tools

About Tanium 

Tanium delivers the industry's only true real-time cloud-based endpoint management and security offering. Its platform is real-time, seamless, and autonomous, allowing security-conscious organizations to break down silos between IT and Security operations that results in reduced complexity, cost, and risk. Securing more than 32M endpoints around the world, Tanium's customers include Fortune 100 organizations, top US retailers, top US commercial banks, and branches of the U.S. Military. It also partners with the world's biggest technology companies, system integrators, and managed service providers to help customers realize the full potential of their IT investments. Tanium has been named to the Forbes Cloud 100 list for nine consecutive years and ranks on the Fortune 100 Best Companies to Work For. For more information on The Power of Certainty™, visit www.tanium.com and follow us on LinkedIn and X. 

On a mission. Together. 

At Tanium, we are stewards of a culture that emphasizes the importance of collaboration, respect, and diversity. In our pursuit of revolutionizing the way some of the largest enterprises and governments in the world solve their most difficult IT challenges, we are strengthened by our unique perspectives and by our collective actions.   

We are an organization with stakeholders around the world and it’s imperative that the diversity of our customers and communities is reflected internally in our team members. We strive to create a diverse and inclusive environment where everyone feels they have opportunities to succeed and grow because we know that only together can we do great things. 

Each of our team members has 5 days set aside as volunteer time off (VTO) to contribute to the communities they live in and give back to the causes they care about most.