Senior Research Engineer

Tenable is looking for a Senior Research Engineer to join our security research team. This position will involve researching existing vulnerabilities, looking for new vulnerabilities, and developing checks/plugins to detect these vulnerabilities using our products. This role will involve some interfacing with stakeholders outside the Research team.

Responsibilities

Researching existing vulnerabilities; looking for new vulnerabilities; developing checks/plugins to detect these vulnerabilities using Tenable products; interfacing with stakeholders outside the Research team; working on complex research and development initiatives; implementing advanced detection logic while minimizing false positives & false negatives; participating in detection logic discussions and the research of new methods for detection; interfacing with stakeholders on externalizing the outcomes of research; helping/training other researchers when needed

Requirements

Keep abreast with the advancements and developments in the security industry and perform original research to keep our customers secure; Develop detection scripts for Tenable’s sensors (Nessus vulnerability scanner and others) based on the research findings; Research and develop methods of detection for additional services and products from different vendors; Demonstrably strong programming skills in one or more languages (C and/or Python); Ability and experience in showcasing original research externally – via blogs, white- papers, etc.; Ability to work independently as a researcher as well as part of a larger team.; Experience working with multiple operating systems (proficiency with Linux is a must); Excellent written and verbal communication skills; Adaptable and able to shift priorities as needed; Meticulous in terms of quality & accuracy of work; Willingness to explore and learn; B.S. degree in Computer Science or a related field, or equivalent work experience; At least 3-5 years of development or R&D experience

Nice to have

Solid understanding of networking & the TCP/IP stack; In depth understanding of common security vulnerabilities, CVSS scoring, vulnerability classification, detection and exploitation techniques; In-depth protocol analysis and interaction. Expert level knowledge of common protocols such as HTTP, DNS, SSH, SMB, etc.; Experience with pen-testing, researching, discovering, or publishing vulnerabilities; One or more security related certifications (e.g. OSCP); Experience with systems administration and be comfortable working at the command line; Exposure to CI/CD pipeline technologies and concepts; Proficiency with SQL, Snowflake; Experience rigorously testing software; Developing tools & test plans for complicated software; Experience with Tenable products such as Nessus, Tenable IO and Security Center

Benefits

Variable compensation; competitive wellness and financial benefits