Research Manager - Security Research/Audits & Compliance

Applicants must be authorized to work for any employer in the U.S. without sponsorship. We are unable to provide sponsorship for work visas of any kind at the time of hire, or at any point during employment. This includes, but is not limited to: F1-OPT, F1-CPT, H-1B, TN, J-1, etc.

Your Role:

Tenable is looking for a Research Manager to join our Audits and Compliance team. The team is responsible for developing software which informs our customers of any compliance misconfigurations in their environments. This position will involve developing audit checks and compliance plugins to detect these misconfigurations using our products, and extending coverage to new technologies. This role will involve some interfacing with stakeholders outside the Research team.

Your Opportunity:

• Provides hands-on technical day-to-day leadership of the team in terms of prioritizing, reviewing and championing audits & compliance initiatives and other research projects
• Externalizes team capabilities through knowledge sharing to other teams throughout the organization and build relationships and opportunities for collaboration
• Externalizes team capabilities to current customers, potential customers, partners and standards bodies
• Mentors talented research engineers on the team and helps recruit enthusiastic, innovative researchers to grow the team
• Collaborates closely with other research teams, program management and various parts of the Tenable Product organization on different projects
• Handles day-to-day management tasks such as performance reviews, employee time off, HR Coordination, IT resource management, etc.
• Keeps team accountable & is accountable for the team and all its members
• Enhances the culture

What You'll Need:

• 3+ years of experience in security research as an individual contributor. Management experience or team lead experience preferred
• Prior experience working with international and remote teams
• Hybrid: Ability to commute to our Columbia, MD headquarters - 3 days per week
• Strong communication and organizational skills
• Ability to collaborate and drive efforts from teams across multiple organizations
• Keep abreast with the advancements and developments in the security industry and perform original research to keep our customers secure and in compliance with benchmark standards
• Adaptable and able to shift priorities among initiatives, as needed
• Prior experience leading and performing open-ended security research when given high-level requirements and details of the desired outcome.
• Must possess the ability to solve problems logically, research options, and focus on meaningful data to draw the right conclusions under pressure
• Familiar with Python, Go, and SCAP/OVAL and able to do code reviews for quality and accuracy
• B.S. degree in Computer Science or a related field, or equivalent work experience; M.S. preferred

And Ideally:

• Strong understanding of security standards such as NIST 800-53, CIS Benchmarks, or DISA STIGS
• Experience with modern AI development tools
• Experience with XSL transforms
• Experience with REST API usage
• Experience with regular expressions
• Experience with NASL
• Experience implementing configuration controls (Group Policy, config files, etc.)
• Previous participation in IT or other similar audit functions. Understanding of the interrelationships between IT resources, internal and external auditors and regulatory or oversight boards.
• One or more security related certifications (e.g. CISSP, CISA, CISM) (Desired)

#LI-Hybrid #LI-LP1