Senior Research Engineer

Tenable • Boston, MA

13d • Hybrid

About The Position

Tenable is looking for a Senior Research Engineer to join a hybrid function that bridges Security Response (SRT) and Decision Science Operations (DSO) within the Research Special Operations group. You will split your time between two complementary missions: responding to high-profile security events and producing the external-facing content that positions Tenable as an authority, and applying quantitative analysis and operational design to help Research leadership make better, faster decisions about where to invest effort. Day to day, you will monitor the threat landscape, coordinate Tenable's end-to-end security response process when a major vulnerability breaks, write the blogs and advisories that follow, and then turn around and ask "what does the data tell us about where we should focus next?" You will work across Research, Public Relations, Marketing, Product, and Program Management to coordinate and deliver actionable business results. This is a strong fit for someone who wants hands-on security research balanced with the analytical, process-improvement work that shapes how a research organization operates.

Requirements

• Ability to work in a hybrid/on-site capacity at Tenable headquarters in Columbia, MD or Boston, MA
• B.S. or higher in Computer Science, Mathematics, Statistics, Data Science, Operations Research, or a related discipline or 5+ years of equivalent professional experience
• 4+ years of programming and scripting experience (Python, SQL, or comparable)
• Strong working knowledge of common security vulnerabilities, CVSS scoring, vulnerability detection, exploitation techniques, and classification methodologies
• Experience with data analytics platforms and business intelligence tools (e.g., Tableau) and with Python data-science tooling (Jupyter, pandas, etc.)
• Familiarity with internet-facing asset discovery and search platforms such as Shodan and Censys
• Broad understanding of infrastructure fundamentals: networking, common protocols, services, and the general technology landscape
• Demonstrated ability to write technical blogs, whitepapers, and research papers, and to present findings to both technical and non-technical audiences
• Strong organizational skills with the ability to manage multiple concurrent workstreams, prioritize competing demands, and set expectations with stakeholders
• Excellent written and verbal communication skills; comfortable coordinating across highly distributed, cross-functional teams
• Ability to operate independently with minimal supervision while contributing as a collaborative member of the broader research team
• Comfort with agile methodologies and fast-paced, event-driven work

Nice To Haves

• Experience with security response, incident coordination, or vulnerability disclosure processes
• Background in exposure management, threat intelligence, or CTEM program support
• Experience building automated data pipelines or integrating intelligence feeds
• Public speaking experience at security conferences (e.g., BSides, RSA, Black Hat)

Responsibilities

• Monitor the threat landscape, track high-profile events in real time, and research the impact of emerging and existing vulnerabilities
• Champion and drive the Security Response process end to end: brief internal stakeholders, coordinate product coverage across engineering teams, arm PR and community channels with current threat information, and maintain continuous cross-functional engagement throughout an event
• Create and refine technical content including blogs, whitepapers, advisories, conference presentations, and webinars for identified security events
• Respond to media inquiries and customer-driven events as they occur
• Automate the discovery and triage of high-profile events from open-source channels, vendor advisories, and internal telemetry
• Synthesize emergent threat and vulnerability intelligence into actionable items for the appropriate team backlogs
• Partner with Research leadership to design and execute data-driven frameworks for development and coverage prioritization
• Collaborate with research and product teams to deliver richer contextual intelligence for identified vulnerabilities
• Build and maintain operational dashboards and analytical workflows that surface trends across the threat and vulnerability landscape
• Provide analytical support and timely insights to internal stakeholders to inform product and business decisions

Benefits

• medical, dental, vision, disability and life insurance
• 401(k) retirement savings with company match
• an employee stock purchase plan
• an employee referral program
• flexible spending accounts
• an Employee Assistance Program (EAP)
• education assistance
• parental leave
• paid time off (PTO)
• company-paid holidays
• health and wellness events
• community programs

What This Job Offers

• Job Type: Full-time
• Career Level: Senior