Senior Security Researcher - Office of the CTO

Tenable Research is seeking a Senior Security Researcher to join our highly technical product research team working at the core of our security products. This is a rare opportunity to join an elite security research team and do work that directly shapes our AI and Cloud products. Your research will span cloud infrastructure, AI systems, emerging platforms, and modern architectures. You will perform novel security research, inform product direction, and contribute to Tenable's thought leadership in cloud and AI security. We are looking for an exceptional security researcher who thrives on variety and can quickly develop expertise in new areas.

Responsibilities

Drive research direction across multiple domains including cloud security, AI security, and emerging threat landscapes.; Perform novel security research to uncover new attack vectors, and adversary techniques across cloud and AI systems.; Translate research findings into actionable product capabilities, detection logic, and risk prioritization guidance.; Stay current with evolving threats across cloud platforms and AI ecosystems, identifying where Tenable should invest next.; Write and speak about security research to strengthen Tenable's voice in cloud and AI security.; Collaborate with product and engineering teams to translate research into shipped capabilities.

Requirements

5+ years of experience in security research, vulnerability research, or offensive security.; Demonstrated ability to quickly develop expertise in new technical domains.; Familiarity with OWASP Top 10 for Large Language Model Applications (prompt injection, data poisoning, system prompt leakage).; Strong understanding of AI systems, frameworks, and deployment patterns, with proven ability to exploit them.; Experience conducting original security research - finding vulnerabilities, understanding attacker behavior, or developing novel techniques.; Highly motivated, curious, and able to work independently in ambiguous problem spaces.; Strong communication skills, written and verbal, with the ability to articulate technical findings and opinions clearly.

Nice to have

Experience across multiple security domains (cloud, AI, infrastructure, application).; Background in offensive security, red teaming, or vulnerability research.; Solid understanding of cloud platforms (AWS, Azure, GCP) and cloud security concepts.; Track record of published security research, conference talks, or technical blog posts.; Experience tracking the evolving AI ecosystem and translating new developments into security research.