Senior Cybersecurity Engineer

Job Description

The Cybersecurity Engineer is responsible for supporting the organization's Vulnerability Management and Endpoint Security programs, with a primary focus on the administration, engineering, and optimization of Tanium.

Regular

The Cybersecurity Engineer is responsible for supporting the organization's Vulnerability Management and Endpoint Security programs, with a primary focus on the administration, engineering, and optimization of Tanium.

This position combines hands‑on security engineering with vulnerability identification, prioritization, remediation, patch management, asset visibility, endpoint compliance, and security automation. The engineer will work closely with Cybersecurity Operations, IT Infrastructure, application owners, and business stakeholders to identify security exposures and drive vulnerabilities through remediation.

The ideal candidate possesses strong technical troubleshooting skills, understands enterprise endpoint environments, and can translate vulnerability and asset data into actionable remediation activities.

• Support the enterprise Vulnerability Management program across workstations, servers, cloud workloads, and other supported infrastructure.
• Identify, analyze, validate, prioritize, and track vulnerabilities across the enterprise.
• Use vulnerability intelligence, asset criticality, exploitability, business impact, and threat intelligence to prioritize remediation activities.
• Perform risk‑based vulnerability prioritization rather than relying solely on CVSS scores.
• Monitor newly disclosed vulnerabilities, zero‑day threats, CISA Known Exploited Vulnerabilities (KEV), and vendor security advisories.
• Coordinate with IT, infrastructure, application, cloud, and system owners to remediate identified vulnerabilities.
• Validate remediation and ensure vulnerabilities are successfully closed.
• Identify recurring vulnerabilities and systemic remediation issues.
• Develop vulnerability dashboards, metrics, KPIs, and executive reporting.
• Support vulnerability remediation SLAs and exception/risk‑acceptance processes.
• Assist with vulnerability management requirements associated with NIST, CMMC, CIS, and other applicable security frameworks.

• Serve as a technical administrator and subject matter resource for the Tanium platform.
• Configure, maintain, troubleshoot, and optimize Tanium modules and services.
• Develop and maintain Tanium sensors, questions, packages, actions, computer groups, dashboards, and reporting.
• Use Tanium to identify hardware, software, operating systems, configurations, applications, and security posture across enterprise endpoints.
• Develop dynamic computer groups to support security operations and targeted remediation.
• Monitor Tanium client health, platform coverage, communication status, and endpoint participation.
• Identify and remediate unhealthy, missing, stale, or non‑communicating Tanium clients.
• Support deployment, upgrade, and maintenance of the Tanium Client.
• Troubleshoot Tanium Client, server, module, sensor, package, and action issues.
• Maintain Tanium role‑based access controls and administrative permissions.
• Assist with platform upgrades, configuration changes, testing, and lifecycle management.

• Administer and optimize Tanium Comply for vulnerability and configuration assessment.
• Configure vulnerability assessments and compliance scans across supported endpoint populations.
• Analyze vulnerability findings and identify affected systems.
• Support configuration assessments against applicable CIS Benchmarks, DISA STIGs, and organizational security standards.
• Develop dashboards and reports showing vulnerability exposure and…