Senior Security Researcher

Accountabilities: The Senior Security Researcher will conduct advanced cybersecurity research, applying offensive security expertise to identify vulnerabilities, understand adversary behavior, and improve security capabilities. This role combines hands-on technical investigation, strategic research, and collaboration with cross-functional teams to deliver actionable insights.

Apply offensive security expertise to improve scanning, fingerprinting, attack surface analysis, and threat detection capabilities.

Conduct original research into emerging attack techniques, exploitation trends, command-and-control infrastructure, and adversary tradecraft.

Analyze internet-scale security data and translate findings into product improvements, detection logic, and risk indicators.

Research agentic AI threats by building, evaluating, and analyzing autonomous penetration testing agents, AI-powered vulnerability research tools, and multi-agent attack frameworks.

Develop technical research reports, blog posts, conference presentations, and other materials that communicate security findings to the broader community.

Partner with engineering and product teams to transform research discoveries into practical security features and capabilities.

Track attacker infrastructure, initial access methods, evasion techniques, and operational patterns to strengthen defensive strategies.

Act as a subject matter expert, mentoring colleagues and helping teams understand offensive security methodologies.

Requirements:

The ideal candidate is an experienced security researcher with strong offensive security knowledge, technical curiosity, and the ability to communicate complex findings clearly. You should be comfortable working independently on advanced research projects while collaborating across technical teams.

5+ years of hands-on experience in penetration testing, red teaming, adversary emulation, or similar offensive security disciplines within enterprise, cloud, or internet-facing environments.

Proven ability to identify and analyze vulnerabilities, misconfigurations, exploitation techniques, and attacker behaviors.

Strong understanding of network protocols, service fingerprinting, and internet-scale scanning concepts.

Experience building, evaluating, or operating AI-driven offensive security tools, including LLM-powered attack agents, autonomous testing frameworks, or AI-assisted vulnerability research workflows.

Strong programming or scripting skills in Python, Go, or similar languages for automation, tooling, and data analysis.

Knowledge of red team frameworks, command-and-control techniques, living-off-the-land methods, and adversary evasion strategies.

Ability to work with large datasets and extract meaningful security insights.

Strong communication skills with the ability to present technical research to both engineering teams and external security audiences.

Relevant certifications such as OSCP, OSCE, OSEP, GXPN, or equivalent demonstrated expertise are preferred.

Experience with IoT, OT/ICS, embedded security, security vendor research, public vulnerability disclosures, CVEs, conference talks, or technical publications is a plus.

Bachelor’s degree in Computer Science, Information Security, or a related field is preferred.

Benefits:

Competitive salary range:

High cost-of-living U.S. locations: $220,000 - $278,000 USD annually, plus bonus eligibility and equity.

Other U.S. locations: $202,000 - $254,000 USD annually, plus bonus eligibility and equity.

Comprehensive health, dental, and vision coverage.

Retirement benefits with company contributions.

Equity opportunities and eligible annual bonus programs.

Flexible paid time off policies.

Parental leave benefits.

Mental health and wellness resources.

Professional development stipend to support continued learning.

Fully remote work environment with opportunities for team collaboration and industry events.

Travel opportunities for conferences and team gatherings.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether? 

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1