Detection Engineer, Tanium
$85-260k
+ Equity
Office located in Emeryville, CA
Security and systems management platform
Be an early applicant
Security and systems management platform
1001+ employees
Be an early applicant
$85-260k
+ Equity
Office located in Emeryville, CA
1001+ employees
Company mission
Tanium's mission is to provide manageability and security at scale for anything with a chip.
Role
Who you are
- In accordance with Department of Defense requirements, applicants for this role must be a U.S. citizen, national, or resident pursuant to 8 U.S.C. 1101(a)(20) and 8 U.S.C. 1324b(a)(3)
- 2+ years working in a Security Operations or equivalent role
- 2+ years responding to threats in cloud environments (Azure and AWS preferred)
- Working knowledge of common frameworks (Mitre ATT&CK)
- Ability to use data to derive meaningful metrics to drive prioritization
- Firm understanding of attacker tactics, techniques, and procedures and means of detection
- Ability to synthesize risks and derive detection countermeasures
- Proficiency with security tools and platforms (e.g., SIEMs, vulnerability scanners, and malware analyzers)
- Familiarity with IDS/IPS systems and endpoint Antivirus and EDR products
- Malware analysis experience preferred
- Working knowledge of Python or other scripting languages preferred
What the job involves
- The Detection Engineer is responsible for facilitating the development and continuous improvement of Tanium’s internal cybersecurity detection program
- Candidates will work closely with operations, engineering, architects and business units throughout Tanium to collaborate on threat models and ensure adequate detection mechanisms are in place for a changing threat landscape
- This role will be required to balance strategic thinking and tactical hands-on execution
- Candidates will enhance existing methods to measure the coverage and quality of detection while also prioritizing and driving efforts to close gaps
- As such, candidates will often create or enhance existing detections mechanisms while ensuring alerts are properly transitioned to the security operations team
- Candidates are expected to question the status quo to identify opportunities for continuous improvement and are enabled to take action to ensure the effectiveness of a distributed security program operating within DevOps centric workflows
- This position is available for remote workers with flexible working hours. When support for incident response is required, this role may require occasion work outside of normal business hours
- Drive a comprehensive security detection strategy applied consistently across the organization
- Develop comprehensive reports and metrics on the efficacy and long-term tracking of detection coverage
- Drive continuous development and tuning of detection measures
- Partner with security teams and business units to define appropriate log visibility & detection related gaps
- Lead continuous improvement efforts to evaluate detection capabilities & related tooling efficiency
- Build innovative ways to detect potential threats within on premise and cloud environments
- Collaborate with operations personnel to prioritize and close detective gaps
- Work with security architects and engineers to develop detective compensating controls based on threat models
- Drive standardization and repeatable processes and procedures within operations as it pertains to responding to threats
- Participate in the development and execution of threat hunting exercises
- Develop, implement, document and maintain SIEM & Detection engineering tooling management controls, standard operating procedures, narratives and test scripts
- Plan, run, and participate in table top exercises
- Collaborate with engineering teams to develop automation to improve the efficiency of security operations
- Provide incident response support
- Leverage threat intelligence reporting to develop new detection capabilities
- Analyze malware and exploit techniques in a lab environment
Our take
For millions of companies, cyber security is high on the agenda, especially as remote working has become the norm. Tanium offers a security and systems management platform that allows real-time data collection at an enterprise scale. It covers customers such as AutoNation, GoDaddy, and Whirlpool who use the company’s software to stay abreast of the ever-increasing level of sophisticated cyber attacks.
A valuable tool for enterprises and government organisations, it partners with leading platforms and service providers across the world like Google Cloud, Oracle and Verizon. In doing so, it allows security and IT teams access to accurate information on the state of endpoints, helping it to realise new levels of business resilience.
Tanium added a former US Defence Secretary to its Board in 2021. A collaboration with Salesforce provided a platform that supports IT service management, remote monitoring and management, and cybersecurity capabilities. In the same year, the appointment of CFO Mark Levine could signal an IPO in the near future.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 9 rounds)
Jan 2021
$150m
LATE VC
Oct 2020
$150m
LATE VC
Total funding: $805.7m
Company benefits
- Equity awards
- Generous benefits package consisting of medical, dental and vision plan
- Family planning benefits
- Health savings account
- Flexible spending account
- Transportation savings account
- 401(k) retirement savings plan
- Business travel accident insurance
- Employee assistance programs
- Disability insurance
Company values
- We do the right thing
- We are unstoppable
- We win as a team
Company HQ
Lakeview, Kirkland, WA
Articles
Leadership
David Hindawi
(Executive Chairman)Before co-founding Tanium, David founded BigFix Inc, a systems management tool that IBM acquired, and Software Ventures, a leader in telecommunications software. They have several software patents in network communications and systems management.
Orion Hindawi
(Executive Chairman)Before co-founding Tanium with their father, David, Orion worked as the VP of Technology for BigFix, the systems management tool founded by their father. Previously served as CEO for Tanium.
Dan Streetman
(CEO, not founder)Previously served as CEO for both Allvue Systems and TIBCO. Experience as EVP of Worldwide Sales & Marketing for BMC Software and as SVP of Worldwide Alliances & Channels for Salesforce.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 24 more jobs at Tanium