Staff Research Engineer - Exposure Intelligence

About the role

Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey! We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together!

Responsibilities

• Execute the daily intelligence production cycle: monitor source ecosystem, triage, classify, analyze, and publish finished intelligence; run the morning production cycle, assess newly disclosed zero‑days, determine need for full analytical workup, write the daily brief, and publish an external digest.
• Produce deeper analytical products: threat assessments with confidence ratings and documented methodology, actor and campaign profiles, focused analytical notes on individual CVEs or exposure conditions.
• Write blog posts for the Tenable blog, coordinate with public relations and product marketing on media responses, and contribute to webinars and conference presentations.
• Provide input into classification standards, analytical methodologies, and source management practices; identify improvement opportunities and collaborate on evolving capabilities, including AI‑assisted workflows.
• Engage with stakeholders: respond to internal intelligence requests from product teams and leadership, collaborate to understand intelligence needs, and bring perspectives back to inform analytical priorities beyond daily response work.

Requirements

• 7+ years in cybersecurity with meaningful depth in at least two of: vulnerability research, threat intelligence analysis, security operations, or exposure/risk management.
• Experience producing structured analytical intelligence: multi‑source assessments with confidence ratings and documented methodology.
• Experience with intelligence community analytic standards preferred.
• Deep familiarity with the vulnerability lifecycle: understanding state from disclosure through exploitation, CVSS scoring, exploit maturity, CISA KEV, and the difference between a vulnerability existing and an exposure being actively exploited.
• Strong understanding of threat actors and campaigns: attribution frameworks, TTP mapping (MITRE ATT&CK), ability to classify threats at the right level without inflation.
• Excellent analytical writing and verbal communication skills: produce significant written output daily including threat briefs, assessments, digests, and blog posts.
• Comfort with structured, repeatable processes: executing within a structured and governed production cycle with quality gates and standards.
• Sound judgment under uncertainty: rapid analytical decisions with incomplete information, honest confidence calibration; ability to work independently and make informed decisions with accuracy and precision.
• Ability to manage multiple concurrent workstreams and shifting priorities.
• Applicants must be authorized to work for any employer in the U.S. without sponsorship; Tenable is unable to provide sponsorship for work visas of any kind at hire or during employment.

Qualifications

• Intelligence community or military intelligence background including structured analytic techniques, source reliability assessment, and analytic confidence frameworks.
• Experience in vulnerability management programs at scale and understanding of what SOC teams need from threat