Senior Security Researcher - Cloud Security

The role

This person will define how vulnerabilities in cloud assets are understood, enriched, and remediated. They will work at the core of the cloud security platform to research exploitability, risk context, and remediation.

What you will do

• Define cloud vulnerability management by grounding findings in how exposure is created.
• Collaborate with engineering and product teams to introduce signals and data that validate exploitability.
• Research how security context affects real-world risk and prioritization.
• Define how vulnerabilities across cloud and code map to fixes.
• Drive AI innovation in how remediation is understood and delivered at scale.
• Share research through technical blogs, reports, and industry conferences.

Required qualifications

• 5+ years of hands-on experience in security research
• Familiarity with real-world vulnerability management: triage, prioritization, remediation, and the gap between CVSS and actual impact
• Strong technical background in cloud platforms (AWS, Azure, GCP), including how vulnerabilities manifest across workloads, services, and code
• Familiarity with application security tooling
• Highly curious, self-driven, and comfortable working in ambiguous, fast-evolving problem spaces
• Strong communication skills, both written and verbal, with the ability to clearly articulate complex technical findings

Nice to have

• Experience with exploit research, full-chain attack analysis, or CVE-to-fix resolution across complex dependency chains
• Experience leveraging AI and agentic workflows for security research and analysis
• Background in application security, secure code review, or supply chain security
• Hands-on experience with SBOM tooling, container scanning, or software composition analysis pipelines
• Track record of published research, conference talks, or technical blog posts
• Experience working with product teams and delivering value to customers through the product

About the company

Tenable is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk.