Tanium Security Engineer: Vulnerability & Automation

AeroVironment, Inc.; Albuquerque (NM); On-site; USD 91,000 - 139,000; Full time

Job summary

AeroVironment, Inc. in Albuquerque, NM is seeking a Cybersecurity Engineer to lead vulnerability management and Tanium-based endpoint security efforts.

This role combines hands-on security engineering with vulnerability identification, prioritization, remediation, patch management, asset visibility, endpoint compliance, and security automation. The engineer will collaborate with Cybersecurity Operations, IT Infrastructure, application owners, and business stakeholders to translate vulnerability

Qualifications

• Bachelor's degree or equivalent professional experience in a related field.

Responsibilities

• Vulnerability Management: support enterprise program across workstations, servers, cloud workloads, and other infrastructure.
• Identify, analyze, validate, prioritize, and track vulnerabilities across the enterprise.
• Use vulnerability intelligence, asset criticality, exploitability, business impact, and threat intel to prioritize remediation.
• Perform risk-based vulnerability prioritization beyond CVSS scores.
• Monitor newly disclosed vulnerabilities, KEV, and vendor advisories.
• Coordinate with IT, infrastructure, application, cloud, and system owners to remediate vulnerabilities.
• Validate remediation and close vulnerabilities.
• Identify recurring vulnerabilities and systemic remediation issues.
• Develop dashboards, metrics, and executive reporting.
• Support vulnerability remediation SLAs and risk-acceptance processes.
• Assist with frameworks (NIST, CMMC, CIS, etc.).
• Tanium Administration & Engineering: configure, maintain, and optimize Tanium modules and services.
• Develop Tanium sensors, questions, packages, actions, groups, dashboards, reporting.
• Identify hardware/software configurations and security posture across endpoints.
• Monitor Tanium client health and coverage.
• Assist with platform upgrades and lifecycle management.
• Tanium Comply & Vulnerability Assessment: administer Tanium Comply for assessments and scans.
• Develop dashboards and reports showing exposure and remediation progress.
• Correlate Tanium data with other vulnerability platforms.
• Investigate discrepancies between Tanium and other scanners or asset systems.
• Audit remediation validity using Tanium data.
• Patch & Remediation Management: support patching activities using Tanium Patch and Deploy or other tools.
• Analyze missing patches and endpoints needing remediation.
• Coordinate patch deployments and maintenance windows.
• Test patches before broad deployment when appropriate.
• Track deployment status and remediation progress.
• Troubleshoot patch failures and deployment issues.
• Automate remediation where feasible.
• Asset Visibility & Endpoint Hygiene: maintain visibility into enterprise endpoint assets.
• Identify unmanaged, unknown, stale, or non-compliant devices.
• Reconcile Tanium data with CMDB and other sources.
• Identify systems missing security agents or controls.
• Support security coverage reporting for EDR, scanning, patching.
• Develop queries and dashboards to identify gaps in coverage.
• Improve overall asset inventory accuracy and endpoint hygiene.
• Security Engineering & Automation: develop scripts and automation for vulnerability management.
• Use PowerShell, Python, APIs to automate tasks.
• Integrate Tanium with SIEM/XDR, ITSM, CMDB, and other platforms.
• Support automated ticketing and remediation workflows.
• Develop dashboards and reporting with actionable security information.
• Identify opportunities to reduce manual remediation through automation.
• Document configurations, procedures, standards, and processes.
• Security Operations Support: assist with vulnerability incidents and threats.
• Identify affected systems and perform investigations with Tanium.
• Support containment and remediation actions as needed.
• Collaborate with threat intel and SOC teams to assess exposure.
• Identify indicators and configurations tied to active threats.

Skills

Tanium Administration

Vulnerability Management

Risk-Based Vulnerability Prioritiz

Patch Management

Endpoint Security

Asset Visibility

Security Configuration Management

Vulnerability Remediation

Security Automation

PowerShell / Scripting

Technical Troubleshooting

Security Metrics & Reporting

Cross-Functional Collaboration

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field

Tools

Tanium

Microsoft Defender for Endpoint

Microsoft Defender Vulnerability Management

Microsoft Intune

PowerShell

Job description

AeroVironment, Inc. in Albuquerque, NM is seeking a Cybersecurity Engineer to lead vulnerability management and Tanium-based endpoint security efforts.

This role combines hands-on security engineering with vulnerability identification, prioritization, remediation, patch management, asset visibility, endpoint compliance, and security automation. The engineer will collaborate with Cybersecurity Operations, IT Infrastructure, application owners, and business stakeholders to translate vulnerability