Senior Security Researcher - Cloud Security

Description

Job Description

Who is Tenable?

Tenable® is an Exposure Management company. 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 60 percent of the Fortune 500, 40 percent of the Global 2000, and large government agencies. Come be part of our journey!

Tenable Cloud Security was born out of the acquisition of Ermetic, an innovative cloud-native application protection platform (CNAPP) company, and a leading provider of cloud infrastructure entitlement management (CIEM). The acquisition combines two cybersecurity innovators and marks an important milestone in Tenable’s mission to shift organizations to proactive security. The combination of Tenable and Ermetic offerings will add capabilities to deliver market-leading contextual risk visibility, prioritization and remediation across infrastructure and identities, both on-premises and in the cloud.

What makes Tenable such a great place to work?

Ask a team member, and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers, all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together!

Your Opportunity

We are looking for a Senior Security Researcher to join our team at Tenable Cloud Security. In this role, you will take part in protecting our customers' cloud environments from a wide range of cyber threats. Your contributions will be directly impactful, not only ensuring our customers' success but also making a significant difference in the evolving landscape of cloud security.

What You Will Do

• Research cloud threats and collaborate closely with the engineering team to transform research insights into innovative product features
• Develop effective detection rules and enhance our product's capabilities for better threat detection
• Launch and manage incident response operations to investigate attacks on cloud environments
• Investigate malware specifically targeting cloud workloads, understanding their mechanisms and impacts, and produce high-quality reports
• Present your unique findings and share knowledge at cyber and cloud conferences
  
  

• 5+ years of experience in security research, threat research, cloud R&D, or offensive security
• Knowledge of OS internals, including both Windows and Linux
• Proficient in data analysis and coding
• Strong communication skills, both written and verbal
• Deep understanding of cyber threats
  
  

• Experience in delivering security detections for products
• Hands-on experience with malware analysis, reverse engineering, and vulnerability research
• Experience in incident response, red-team operations, and threat hunting
• Experience with cloud services, Kubernetes, cloud environment architecture, and major cloud providers such as AWS, GCP, and Azure
• Familiarity with cloud threats