Описание

Tenable Research is seeking a Senior Security Researcher - Cloud Security to join a highly technical product research team working at the core of their cloud security platform.

Responsibilities

Own Vulnerability Management Across Tenable's Cloud Security Platform: Define cloud vulnerability management by grounding findings in how exposure is actually created and what resolving it means for organizations.
Collaborate with engineering and product teams to introduce the signals and data that validate exploitability and drive remediation.
Establish the standard for what separates an actionable finding from a theoretical one.
Research Exploitability and Risk Context: Research how the security context around a finding affects its real-world risk and what resolving it looks like.
Define how these factors shape prioritization and remediation across the platform.
Lead Remediation Research: Define how vulnerabilities across cloud and code map to the fixes that resolve them, and drive AI innovation in how remediation is understood and delivered at scale.
Work with engineering and product to build the capabilities that close the loop from detection to resolution.
Publish and Present: Share research through technical blogs, reports, and leading industry conferences.

Requirements

5+ years of hands-on experience in security research
Familiarity with real-world vulnerability management: triage, prioritization, remediation, and the gap between CVSS and actual impact
Strong technical background in cloud platforms (AWS, Azure, GCP), including how vulnerabilities manifest across workloads, services, and code
Familiarity with application security tooling
Highly curious, self-driven, and comfortable working in ambiguous, fast-evolving problem spaces
Strong communication skills, both written and verbal, with the ability to clearly articulate complex technical findings

Nice to have

Experience with exploit research, full-chain attack analysis, or CVE-to-fix resolution across complex dependency chains
Experience leveraging AI and agentic workflows for security research and analysis
Background in application security, secure code review, or supply chain security
Hands-on experience with SBOM tooling, container scanning, or software composition analysis pipelines
Track record of published research, conference talks, or technical blog posts
Experience working with product teams and delivering value to customers through the product

We offer

A culture of belonging, respect, and excellence where employees can be their best selves
Partnership with talented and passionate people in the industry
Support and resources to do work that truly matters

Hiring process

If you need a reasonable accommodation due to a disability during the application or recruiting process, contact ••• for further assistance