<div class="content-intro"><p><strong>Who is Tenable?</strong></p> <p>Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey!</p> <p><strong>What makes Tenable such a great place to work?</strong></p> <p>Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together!</p></div><p><span style="color: #000000;"><strong>Your Opportunity:</strong></span></p> <p><span style="color: #000000;">Tenable Research is seeking a Senior Security Researcher - Cloud Security to join our highly technical product research team working at the core of our cloud security platform.</span></p> <p><span style="color: #000000;">This is a rare opportunity to join an elite research team and do work that directly shapes our product. In this role, you will define how vulnerabilities in cloud assets are understood, enriched, and remediated. As AI floods production with vulnerabilities, you design the model and system that keeps teams ahead of it.</span></p> <p><span style="color: #000000;">You will define the foundation for how cloud vulnerabilities are treated across the platform, from reachability and exploitability to effective resolution. Your work will directly shape product direction and set the standard for what handling vulns at scale actually means.</span></p> <p><span style="color: #000000;">We are looking for an exceptional researcher who can bridge cloud security, application security, and vulnerability management. You are curious, comfortable with ambiguity, and driven to deeply understand how vulnerabilities manifest and how they are fixed across cloud environments and code.</span></p> <p><br><strong>Your Role:</strong></p> <ul> <li style="color: #000000 !important;"><span style="color: #000000;">Own Vulnerability Management Across Tenable's Cloud Security Platform: Define cloud vulnerability management by grounding findings in how exposure is actually created and what resolving it means for organizations. Collaborate with engineering and product teams to introduce the signals and data that validate exploitability and drive remediation. Establish the standard for what separates an actionable finding from a theoretical one.</span></li> <li style="color: #000000 !important;"><span style="color: #000000;">Research Exploitability and Risk Context: Research how the security context around a finding affects its real-world risk and what resolving it looks like. Define how these factors shape prioritization and remediation across the platform.</span></li> <li style="color: #000000 !important;"><span style="color: #000000;">Lead Remediation Research: Define how vulnerabilities across cloud and code map to the fixes that resolve them, and drive AI innovation in how remediation is understood and delivered at scale. Work with engineering and product to build the capabilities that close the loop from detection to resolution.</span></li> <li style="color: #000000 !important;"><span style="color: #000000;">Publish and Present: Share research through technical blogs, reports, and leading industry conferences.</span></li> </ul> <p> </p> <p><br><strong>What You'll Need:</strong></p> <ul> <li style="color: #000000 !important;"><span style="color: #000000;">5+ years of hands-on experience in security research</span></li> <li style="color: #000000 !important;"><span style="color: #000000;">Familiarity with real-world vulnerability management: triage, prioritization, remediation, and the gap between CVSS and actual impact</span></li> <li style="color: #000000 !important;"><span style="color: #000000;">Strong technical background in cloud platforms (AWS, Azure, GCP), including how vulnerabilities manifest across workloads, services, and code</span></li> <li style="color: #000000 !important;"><span style="color: #000000;">Familiarity with application security tooling</span></li> <li style="color: #000000 !important;"><span style="color: #000000;">Highly curious, self-driven, and comfortable working in ambiguous, fast-evolving problem spaces</span></li> <li style="color: #000000 !important;"><span style="color: #000000;">Strong communication skills, both written and verbal, with the ability to clearly articulate complex technical findings</span></li> </ul> <p> </p> <p><span style="color: #000000;"><strong>And Ideally:</strong></span></p> <ul> <li style="color: #000000 !important;"><span style="color: #000000;">Experience with exploit research, full-chain attack analysis, or CVE-to-fix resolution across complex dependency chains</span></li> <li style="color: #000000 !important;"><span style="color: #000000;">Experience leveraging AI and agentic workflows for security research and analysis</span&g