Back to jobs

IT Security Engineer

Durham, NC (Hybrid)

The Basics 

The Security Engineer will collaborate with Security, IT, and Engineering teams to defend and strengthen our security operations posture. You will be an integral part of the IT Security Engineering Team, responsible for owning and operating our SOAR and SIEM platforms, driving endpoint security initiatives, and building the automation and processes needed to detect, respond to, and remediate threats across the environment. 

What you'll do 

  • Contribute to and maintain our in-house SOAR platform — develop automation playbooks, extend capabilities, and accelerate incident response
  • Contribute to the aggressive adoption of AI tools within the Security team as well the protection of AI technologies across Tanium
  • Manage and optimize our SIEM environment — maintain data ingestion pipelines, ensure log source coverage meets security requirements, and partner with detection engineering on deployment and tuning
  • Support endpoint security tooling — deploy, configure, and troubleshoot endpoint detection and response (EDR) solutions across the fleet
  • Review IT infrastructure changes for security implications, ensuring new configurations and deployments align with security standards and best practices
  • Partner with IT and infrastructure teams to onboard new log sources, improve telemetry, and close visibility gaps
  • Contribute to incident response processes, including containment, eradication, and post-incident review 

We're looking for someone with 

Security Experience 

  • 3–5 years of experience in a security engineering, security operations, or detection engineering role
  • Experience securing AI/ML workloads or applying AI-assisted tooling to security operations (e.g., LLM-driven triage, automated analysis, AI-augmented detection)
  • Hands-on experience administering a SIEM platform (e.g., Sentinel, Splunk, Elastic, Chronicle)
  • Hands-on experience with a SOAR platform (e.g., Cortex XSOAR, Splunk SOAR, Tines, Swimlane)
  • Solid understanding of endpoint security concepts — EDR, host-based detection, OS-level telemetry
  • Understanding of network protocols, operating systems (Windows, Linux, macOS), and common enterprise infrastructure
  • Experience operating in and managing cloud environments (AWS, Azure) 

Engineering Experience 

  • Proficiency in scripting and automation (our stack is primarily Python, but equivalent experience is welcome)
  • Experience with CI/CD concepts — pipelines, automated testing, and deployment workflows
  • Experience managing infrastructure as code (e.g., Terraform)
  • Strong troubleshooting and analytical skills
  • A relentless desire to automate the mundane to focus on solving the harder problems 

Nice to Have 

  • Experience with Tanium for endpoint management, visibility, or security modules
  • Experience with Azure Data Explorer (ADX) and Microsoft Sentinel
  • Experience writing detection logic (SPL, KQL, Sigma, or equivalent)
  • Familiarity with detection engineering practices and frameworks such as MITRE ATT&CK
  • Experience with threat intelligence platforms and enrichment workflows
  • Cloud security monitoring experience (AWS, Azure, GCP)
  • Experience supporting incident response in an engineering capacity — data gathering, log analysis, and providing technical context to responders 

About Tanium 

Tanium is the Autonomous IT company. Driven by AI and real-time endpoint intelligence, Tanium Autonomous IT empowers IT and security teams to make their organizations unstoppable.
 
Many of the world’s leading organizations trust Tanium’s single, unified platform for endpoint management and security to innovate faster, stay resilient and move business forward with confidence, at scale. To learn how Tanium delivers Autonomous IT for unstoppable business – visit www.tanium.com and follow us on LinkedIn and X.

On a mission. Together. 

At Tanium, we are stewards of a culture that emphasizes the importance of collaboration, respect, and diversity. In our pursuit of revolutionizing the way some of the largest enterprises and governments in the world solve their most difficult IT challenges, we are strengthened by our unique perspectives and by our collective actions.   

As a global organization with stakeholders around the world, it’s imperative that the diversity of our customers and communities is reflected internally in our team members. We strive to create a diverse and inclusive environment where everyone feels they have opportunities to succeed and grow because we know that only together can we do great things.  

Our commitment to excellence and innovation has earned us a place on the Forbes Cloud 100 list for ten consecutive years, and we continue to be recognized worldwide as a great place to work. 

Each of our team members has 5 days set aside as volunteer time off (VTO) to contribute to the communities they live in and give back to the causes they care about most.   

What you’ll get 

The annual base salary range for this full-time position is $113,000 to $173,000. This range is an estimate for what Tanium will pay a new hire. The actual annual base salary offered may be adjusted based on a variety of factors, including but not limited to, location, education, skills, training, and experience.

In addition to an annual base salary, team members will receive equity awards and a generous benefits package consisting of medical, dental and vision plan, family planning benefits, health savings account, flexible spending account, transportation savings account, 401(k) retirement savings plan with company match, life, accident and disability coverage, business travel accident insurance, employee assistance programs, disability insurance, and other well-being benefits.

 

For more information on how Tanium processes your personal data, please see our Privacy Policy

Apply for this job

*

indicates a required field

Phone
Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf


Select...
Select...
Select...
Select...

Voluntary Self-Identification

To comply with government reporting obligations, we ask candidates to respond to the below self-identification survey. In addition, this information helps Tanium to have an inclusive environment for all by identifying and removing barriers in our hiring practices. Completing this form will help us achieve this goal. Providing this information is voluntary and you may decline to self-identify for any of the categories below. Whatever your decision, your responses will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.  

As set forth in Tanium’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.  

Race & Ethnicity Definitions

  • Hispanic or Latino - A person of Cuban, Mexican, Puerto Rican, South or Central American, or other Spanish culture or origin regardless of race.  
  • White (Not Hispanic or Latino) - A person having origins in any of the original peoples of Europe, the Middle East, or North Africa.  
  • Black or African American (Not Hispanic or Latino) - A person having origins in any of the black racial groups of Africa.  
  • Native Hawaiian or Other Pacific Islander (Not Hispanic or Latino) - A person having origins in any of the peoples of Hawaii, Guam, Samoa, or other Pacific Islands.  
  • Asian (Not Hispanic or Latino) - A person having origins in any of the original peoples of the Far East, Southeast Asia, or the Indian Subcontinent, including, for example, Cambodia, China, India, Japan, Korea, Malaysia, Pakistan, the Philippine Islands, Thailand, and Vietnam.  
  • American Indian or Alaska Native (Not Hispanic or Latino) - A person having origins in any of the original peoples of North and South America (including Central America), and who maintain tribal affiliation or community attachment.  
  • Two or More Races (Not Hispanic or Latino) - All persons who identify with more than one of the above six races. 

Categories of Protected Veterans

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows: 

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability. 

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service. 

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense. 

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985. 

 

Voluntary Self-Identification of Disability

Form CC-305
OMB Control Number 1250-0005 
Expires 5/31/2026 

Why are you being asked to complete this form?  

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years. 

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp. 

How do you know if you have a disability?  

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. 

Disabilities include, but are not limited to:  

  • Alcohol or other substance use disorder (not currently using drugs illegally) 
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS 
  • Blind or low vision 
  • Cancer (past or present) 
  • Cardiovascular or heart disease 
  • Celiac disease 
  • Cerebral palsy 
  • Deaf or serious difficulty hearing 
  • Diabetes 
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders 
  • Epilepsy or other seizure disorder 
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome 
  • Intellectual or developmental disability 
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD 
  • Missing limbs or partially missing limbs 
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports 
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS) 
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities 
  • Partial or complete paralysis (any cause) 
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema 
  • Short stature (dwarfism) 
  • Traumatic brain injury  

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.  

Select...
Select...
Select...
Select...