We are looking for an exceptional researcher who can bridge cloud security, application security, and vulnerability management. You are curious, comfortable with ambiguity, and driven to deeply understand how vulnerabilities manifest and how they are fixed across cloud environments and code.
Your Role
Own Vulnerability Management Across Tenable's Cloud Security Platform: Define cloud vulnerability management by grounding findings in how exposure is actually created and what resolving it means for organizations. Collaborate with engineering and product teams to introduce the signals and data that validate exploitability and drive remediation. Establish the standard for what separates an actionable finding from a theoretical one.
Research Exploitability and Risk Context: Research how the security context around a finding affects its real-world risk and what resolving it looks like. Define how these factors shape prioritization and remediation across the platform.
Lead Remediation Research: Define how vulnerabilities across cloud and code map to the fixes that resolve them, and drive AI innovation in how remediation is understood and delivered at scale. Work with engineering and product to build the capabilities that close the loop from detection to resolution.
Publish and Present: Share research through technical blogs, reports, and leading industry conferences.
What You'll Need
5+ years of hands-on experience in security research
Familiarity with real-world vulnerability management: triage, prioritization, remediation, and the gap between CVSS and actual impact
Strong technical background in cloud platforms (AWS, Azure, GCP), including how vulnerabilities manifest across workloads, services, and code
Familiarity with application security tooling
Highly curious, self-driven, and comfortable working in ambiguous, fast-evolving problem spaces
Strong communication skills, both written and verbal, with the ability to clearly articulate complex technical findings
And Ideally
Experience with exploit research, full-chain attack analysis, or CVE-to-fix resolution across complex dependency chains
Experience leveraging AI and agentic workflows for security research and analysis
Background in application security, secure code review, or supply chain security
Hands-on experience with SBOM tooling, container scanning, or software composition analysis pipelines
Track record of published research, conference talks, or technical blog posts
Experience working with product teams and delivering value to customers through the product
We’re committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels. If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact Recruiting@Tenable.com for further assistance.
Tenable Data Consent Statement
Tenable is committed to protecting the privacy and security of your personal data. Depending on your location, one or more of the following notices may apply to you:
- General Applicant Privacy Notice
- California Applicant Privacy Notice
- EU/EEA/UK Applicant Privacy Notice