Your role:

Tenable is looking for a Research Engineer to join our Vulnerability Detection team. The team is responsible for developing software which informs our customers of any cyber exposures in their environments. This position will involve developing checks/plugins to detect these vulnerabilities using our products, researching existing vulnerabilities & looking for new vulnerabilities. This role will involve some interfacing with stakeholders outside the Research team.

Your Opportunity:

Implements advanced detection logic while minimizing false positives & negatives

Works on complex research and development initiatives

Participates in detection logic discussions and the research of new methods for detection

Interfaces with stakeholders on externalizing the outcomes of research

Helps / trains other researchers, when needed

What you'll need:

Demonstrably strong programming skills in one or more languages.

Proficiency in writing unit tests & debugging.

Solid understanding of networking & the TCP/IP stack.

Experience developing enterprise software in a collaborative manner using Git (or a similar VCS).

Proficiency in creating regular expressions to match patterns.

Strong system administration skills (particularly on Unix-based systems).

Exposure to CI/CD pipeline technologies and concepts.

Ability to work independently and as part of a larger team.

Excellent written and verbal communication skills.

Meticulous in terms of quality & accuracy of work.

Willingness to explore and learn.

B.S. degree in Computer Science or a related field, or equivalent work experience.

At least 2-3 years of development or R&D experience.

And Ideally:

Ability and experience in showcasing original research externally – via blogs, white- papers, etc.

Passionate about technology. Keep up with advancements and developments in the development / security industries.

Perform original research to keep our customers secure

Knowledge of software development design patterns.

In-depth understanding of common security vulnerabilities, CVSS scoring, vulnerability classification, detection and exploitation techniques.

In-depth protocol analysis and interaction. Expert level knowledge of common protocols such as HTTP, DNS, SSH, SMB, etc.

Experience with pen-testing, researching, discovering, or publishing vulnerabilities

One or more security related certifications (e.g. OSCP)

Proficiency with SQL.

Experience with Tenable products such as Nessus, Security Center & Tenable Vulnerability Management.

Exposure to cloud computing concepts (AWS, Azure, GCP).

 

#LI-Hybrid

#LI-AV1