Senior Research Engineer, Tenable

• Ability to work in a hybrid/on-site capacity at Tenable headquarters in Columbia, MD or Boston, MA
• B.S. or higher in Computer Science, Mathematics, Statistics, Data Science, Operations Research, or a related discipline or 5+ years of equivalent professional experience
• 4+ years of programming and scripting experience (Python, SQL, or comparable)
• Strong working knowledge of common security vulnerabilities, CVSS scoring, vulnerability detection, exploitation techniques, and classification methodologies
• Experience with data analytics platforms and business intelligence tools (e.g., Tableau) and with Python data-science tooling (Jupyter, pandas, etc.)
• Familiarity with internet-facing asset discovery and search platforms such as Shodan and Censys
• Broad understanding of infrastructure fundamentals: networking, common protocols, services, and the general technology landscape
• Demonstrated ability to write technical blogs, whitepapers, and research papers, and to present findings to both technical and non-technical audiences
• Strong organizational skills with the ability to manage multiple concurrent workstreams, prioritize competing demands, and set expectations with stakeholders
• Excellent written and verbal communication skills; comfortable coordinating across highly distributed, cross-functional teams
• Ability to operate independently with minimal supervision while contributing as a collaborative member of the broader research team
• Comfort with agile methodologies and fast-paced, event-driven work

Desirable

• Tenable is looking for a Senior Research Engineer to join a hybrid function that bridges Security Response (SRT) and Decision Science Operations (DSO) within the Research Special Operations group
• You will split your time between two complementary missions: responding to high-profile security events and producing the external-facing content that positions Tenable as an authority, and applying quantitative analysis and operational design to help Research leadership make better, faster decisions about where to invest effort
• Day to day, you will monitor the threat landscape, coordinate Tenable's end-to-end security response process when a major vulnerability breaks, write the blogs and advisories that follow, and then turn around and ask "what does the data tell us about where we should focus next?"
• You will work across Research, Public Relations, Marketing, Product, and Program Management to coordinate and deliver actionable business results
• This is a strong fit for someone who wants hands-on security research balanced with the analytical, process-improvement work that shapes how a research organization operates
• Security Response:
• Monitor the threat landscape, track high-profile events in real time, and research the impact of emerging and existing vulnerabilities
• Champion and drive the Security Response process end to end: brief internal stakeholders, coordinate product coverage across engineering teams, arm PR and community channels with current threat information, and maintain continuous cross-functional engagement throughout an event
• Create and refine technical content including blogs, whitepapers, advisories, conference presentations, and webinars for identified security events
• Respond to media inquiries and customer-driven events as they occur
• Automate the discovery and triage of high-profile events from open-source channels, vendor advisories, and internal telemetry
• Synthesize emergent threat and vulnerability intelligence into actionable items for the appropriate team backlogs
• Decision Science Operations:
• Partner with Research leadership to design and execute data-driven frameworks for development and coverage prioritization
• Collaborate with research and product teams to deliver richer contextual intelligence for identified vulnerabilities
• Build and maintain operational dashboards and analytical workflows that surface trends across the threat and vulnerability landscape
• Provide analytical support and timely insights to internal stakeholders to inform product and business decisions