Location: Hybrid 3 days on site in Knutsford
Duration: 31/03/2027
Rate 497
MUST BE PAYE THROUGH UMBRELLA

Role Description:
As part of the Cyber Enhancement Programme (CEP), the Tanium Technical SME will address critical capability and coverage gaps in the organisation’s current Tanium EDR and telemetry estate. These roles are required to ensure the organisation can prevent, detect, respond to, and contain cyber threats at speed and scale. Internal SME capacity is fully consumed, and no Tanium resources are currently available to deliver the 2026 CEP Book of Work, necessitating external specialist support.
Key Responsibilities

• Lead remediation of an agreed list of known Tanium EDR gaps across the estate.
• Activate, configure, and deploy Tanium Reactions aligned to containment and detection requirements.
• Support Tanium device discovery, improving asset visibility across hardware, software and telemetry.
• Integrate device data, software data, and extended telemetry into SIEM and wider detection tooling.
• Develop and implement CI/CD pipelines for Detection Engineering content deployed through Tanium.
• Conduct Tanium testing and validation cycles, including rollback procedures to support CI/CD and containment operations.
• Collaborate with Detection Engineering, Endpoint, and C2E workstreams to ensure readiness for platform go-live.
• Provide expert input into Tanium architecture, enhancements, integrations, and operational uplift.
• Produce documentation, operational runbooks, and configuration standards for long-term sustainability.

Skills & Experience Required

• Proven expertise configuring, deploying, and operating the Tanium platform at enterprise scale.

• Strong experience in Tanium modules including:

• Tanium Threat Response

• Tanium Discover / Asset

• Tanium Deploy

• Tanium Signals & Reactions

• Deep knowledge of endpoint telemetry, EDR technologies, and cyber threat detection.

• Hands?on CI/CD experience, including automated content build, testing, and rollback.

• Experience integrating Tanium data into SIEM platforms and detection pipelines.

• Ability to troubleshoot complex endpoint, sensor, and configuration issues.

• Strong communication and documentation skills, with ability to influence multiple workstreams.