Product Security Engineer, Tanium
Bug Bounty
$100-190k
Office located in Emeryville, CA
Security and systems management platform
Open for applications
Security and systems management platform
1001+ employees
Open for applications
$100-190k
Office located in Emeryville, CA
1001+ employees
Company mission
Tanium's mission is to provide manageability and security at scale for anything with a chip.
Role
Who you are
- Bachelor’s Degree or equivalent work experience
- 3+ years relevant work experience preferred
- Expertise in determining the severity of a vulnerability and their impact to the business
- Expertise with common security testing methodologies
- Strong communication skills with external stakeholders
- Strong understanding of web and native application security
- Experience in manual and automated pen testing
- Experience performing source code reviews
- Experience with using Burp Suite or similar tools
- Experience with Cloud Platform (AWS or Azure preferred)
- Experience with at least one of the following programming languages: Golang, JavaScript, Node.js, TypeScript, C++, React, Python (to perform source code reviews)
- Experience with the process of developing, building, and shipping secure code
- Experience with bug bounty platforms (e.g., HackerOne, Bugcrowd) and vulnerability management tools
What the job involves
- The Product Security Engineer will be responsible for ensuring that Tanium provides software and services that meet the high security standard of our customers
- This role is focused on the management of Tanium's responsible disclosure (bug bounty) program
- The Product Security Engineer may also take ownership of special projects such as security enhancements to the Tanium codebase or creation of internal tooling that aim at improving the overall security posture of Tanium software
- In addition, the Product Security Engineer will perform research on industry trends and developments and share such perspectives in appropriate forums
- Maturing Tanium's bug bounty program to establish guidelines for scope and response timelines
- Manage and oversee the bug bounty program, including triaging vulnerability reports, validating findings, communicating with external security researchers, and coordinating with internal teams to ensure timely resolution
- Develop infrastructure and tooling to enable 3rd party researchers to effectively test Tanium products
- Analyze data, identify trends, and provide recommendations for internal teams to make it easier to ship secure code and harder to ship insecure code
- Develop and share research in the area of product security and vulnerability management
Our take
For millions of companies, cyber security is high on the agenda, especially as remote working has become the norm. Tanium offers a security and systems management platform that allows real-time data collection at an enterprise scale. It covers customers such as AutoNation, GoDaddy, and Whirlpool who use the company’s software to stay abreast of the ever-increasing level of sophisticated cyber attacks.
A valuable tool for enterprises and government organisations, it partners with leading platforms and service providers across the world like Google Cloud, Oracle and Verizon. In doing so, it allows security and IT teams access to accurate information on the state of endpoints, helping it to realise new levels of business resilience.
Tanium added a former US Defence Secretary to its Board in 2021. A collaboration with Salesforce provided a platform that supports IT service management, remote monitoring and management, and cybersecurity capabilities. In the same year, the appointment of CFO Mark Levine could signal an IPO in the near future.
Steph
Company Specialist at Welcome to the Jungle
Insights
-11% employee growth in 12 months
Company
Funding (last 2 of 9 rounds)
Jan 2021
$150m
LATE VC
Oct 2020
$150m
LATE VC
Total funding: $805.7m
Company benefits
- Equity awards
- Generous benefits package consisting of medical, dental and vision plan
- Family planning benefits
- Health savings account
- Flexible spending account
- Transportation savings account
- 401(k) retirement savings plan
- Business travel accident insurance
- Employee assistance programs
- Disability insurance
Company HQ
Lakeview, Kirkland, WA
Leadership
David Hindawi
(Executive Chairman)Before co-founding Tanium, David founded BigFix Inc, a systems management tool that IBM acquired, and Software Ventures, a leader in telecommunications software. They have several software patents in network communications and systems management.
Orion Hindawi
(Executive Chairman)Before co-founding Tanium with their father, David, Orion worked as the VP of Technology for BigFix, the systems management tool founded by their father. Previously served as CEO for Tanium.
Dan Streetman
(CEO, not founder)Previously served as CEO for both Allvue Systems and TIBCO. Experience as EVP of Worldwide Sales & Marketing for BMC Software and as SVP of Worldwide Alliances & Channels for Salesforce.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 24 more jobs at Tanium