Senior Cybersecurity Engineer

Worker Type Regular Job  Description Summary The  Cybersecurity Engineer is responsible for supporting the organization's Vulnerability Management and Endpoint Security programs, with a primary focus on the administration, engineering, and optimization of Tanium.

This position combines hands-on security engineering with vulnerability identification, prioritization, remediation, patch management, asset visibility, endpoint compliance, and security automation. The engineer will work closely with Cybersecurity Operations, IT Infrastructure, application owners, and business stakeholders to identify security exposures and drive vulnerabilities through remediation.

The ideal candidate possesses strong technical troubleshooting skills, understands enterprise endpoint environments, and can translate vulnerability and asset data into actionable remediation activities.

Position Responsibilities Vulnerability Management Support the enterprise Vulnerability Management program across workstations, servers, cloud workloads, and other supported infrastructure.

Identify, analyze, validate, prioritize, and track vulnerabilities across the enterprise.

Use vulnerability intelligence, asset criticality, exploitability, business impact, and threat intelligence to prioritize remediation activities.

Perform risk-based vulnerability prioritization rather than relying solely on CVSS scores.

Monitor newly disclosed vulnerabilities, zero-day threats, CISA Known Exploited Vulnerabilities (KEV), and vendor security advisories.

Coordinate with IT, infrastructure, application, cloud, and system owners to remediate identified vulnerabilities.

Validate remediation and ensure vulnerabilities are successfully closed.

Identify recurring vulnerabilities and systemic remediation issues.

Develop vulnerability dashboards, metrics, KPIs, and executive reporting.

Support vulnerability remediation SLAs and exception/risk-acceptance processes.

Assist with vulnerability management requirements associated with NIST, CMMC, CIS, and other applicable security frameworks.

Tanium Administration & Engineering Serve as a technical administrator and subject matter resource for the Tanium platform.

Configure, maintain, troubleshoot, and optimize Tanium modules and services.

Develop and maintain Tanium sensors, questions, packages, actions, computer groups, dashboards, and reporting.

Use Tanium to identify hardware, software, operating systems, configurations, applications, and security posture across enterprise endpoints.

Develop dynamic computer groups to support security operations and targeted remediation.

Monitor Tanium client health, platform coverage, communication status, and endpoint participation.

Identify and remediate unhealthy, missing, stale, or non-communicating Tanium clients.

Support deployment, upgrade, and maintenance of the Tanium Client.

Troubleshoot Tanium Client, server, module, sensor, package, and action issues.

Maintain Tanium role-based access controls and administrative permissions.

Assist with platform upgrades, configuration changes, testing, and lifecycle management.

Tanium Comply & Vulnerability Assessment Administer and optimize Tanium Comply for vulnerability and configuration assessment.

Configure vulnerability assessments and compliance scans across supported endpoint populations.

Analyze vulnerability findings and identify affected systems.

Support configuration assessments against applicable CIS Benchmarks, DISA STIGs, and organizational security standards.

Develop dashboards and reports showing vulnerability exposure and remediation progress.

Correlate Tanium vulnerability information with other vulnerability and security platforms.

Investigate discrepancies between Tanium and other vulnerability scanners or asset-management systems.

Use Tanium data to validate remediation activities and identify residual exposure.

Patch & Remediation Management Support enterprise patch and vulnerability remediation activities using Tanium Patch and Deploy or integrated endpoint-management technologies.

Analyze missing patches and identify endpoints requiring remediation.

Develop and maintain patch deployment groups and maintenance windows.

Coordinate security patching with IT and system owners.

Support emergency remediation activities for critical and actively exploited vulnerabilities.

Test and validate security patches prior to broad deployment when appropriate.

Track patch deployment status, failures, exceptions, and remediation progress.

Troubleshoot failed patch installations and…