Senior Security Researcher [Remote]

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Researcher based in United States.

This role offers the opportunity to operate at the intersection of offensive security, internet-scale intelligence, and advanced cyber threat research.
The position focuses on uncovering emerging attacker techniques and transforming findings into impactful security capabilities.
You will contribute to research that helps organizations better understand and defend against evolving threats.
Working with engineering, product, and research teams, you will influence detection strategies and cybersecurity innovation.
The role provides the autonomy to pursue ambitious projects while contributing to highly visible industry research.
You will work with large-scale internet data and cutting-edge AI security technologies in a collaborative environment.
This is an opportunity for an experienced security professional to shape the future of offensive security research.

Accountabilities:

The Senior Security Researcher will conduct advanced cybersecurity research, applying offensive security expertise to identify vulnerabilities, understand adversary behavior, and improve security capabilities. This role combines hands-on technical investigation, strategic research, and collaboration with cross-functional teams to deliver actionable insights.

• Apply offensive security expertise to improve scanning, fingerprinting, attack surface analysis, and threat detection capabilities.
• Conduct original research into emerging attack techniques, exploitation trends, command-and-control infrastructure, and adversary tradecraft.
• Analyze internet-scale security data and translate findings into product improvements, detection logic, and risk indicators.
• Research agentic AI threats by building, evaluating, and analyzing autonomous penetration testing agents, AI-powered vulnerability research tools, and multi-agent attack frameworks.
• Develop technical research reports, blog posts, conference presentations, and other materials that communicate security findings to the broader community.
• Partner with engineering and product teams to transform research discoveries into practical security features and capabilities.
• Track attacker infrastructure, initial access methods, evasion techniques, and operational patterns to strengthen defensive strategies.
• Act as a subject matter expert, mentoring colleagues and helping teams understand offensive security methodologies.

Requirements:

The ideal candidate is an experienced security researcher with strong offensive security knowledge, technical curiosity, and the ability to communicate complex findings clearly. You should be comfortable working independently on advanced research projects while collaborating across technical teams.

• 5+ years of hands-on experience in penetration testing, red teaming, adversary emulation, or similar offensive security disciplines within enterprise, cloud, or internet-facing environments.
• Proven ability to identify and analyze vulnerabilities, misconfigurations, exploitation techniques, and attacker behaviors.
• Strong understanding of network protocols, service fingerprinting, and internet-scale scanning concepts.
• Experience building, evaluating, or operating AI-driven offensive security tools, including LLM-powered attack agents, autonomous testing frameworks, or AI-assisted vulnerability research workflows.
• Strong programming or scripting skills in Python, Go, or similar languages for automation, tooling, and data analysis.
• Knowledge of red team frameworks, command-and-control techniques, living-off-the-land methods, and adversary evasion strategies.
• Ability to work with large datasets and extract meaningful security insights.
• Strong communication skills with the ability to present technical research to both engineering teams and external security audiences.
• Relevant certifications such as OSCP, OSCE, OSEP, GXPN, or equivalent demonstrated expertise are preferred.
• Experience with IoT, OT/ICS, embedded security, security vendor research, public vulnerability disclosures, CVEs, conference talks, or technical publications is a plus.
• Bachelor’s degree in Computer Science, Information Security, or a related field is preferred.

Benefits:

• Competitive salary range:
  • High cost-of-living U.S. locations: $220,000 - $278,000 USD annually, plus bonus eligibility and equity.
  • Other U.S. locations: $202,000 - $254,000 USD annually, plus bonus eligibility and equity.
• Comprehensive health, dental, and vision coverage.
• Retirement benefits with company contributions.
• Equity opportunities and eligible annual bonus programs.
• Flexible paid time off policies.
• Parental leave benefits.
• Mental health and wellness resources.
• Professional development stipend to support continued learning.
• Fully remote work environment with opportunities for team collaboration and industry events.
• Travel opportunities for conferences and team gatherings.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.