ZipRecruiter

Log In

2

Full Time Security Researcher Jobs (NOW HIRING)

DepthFirst

Security Researcher

San Francisco, CA · On-site

Qualifications * 3+ years of full-time experience in security research, offensive security, or related fields. * Experience with finding vulnerabilities in source code * Experience creating PoC ...

depthfirst

Security Researcher

San Francisco, CA · On-site

Required : • 3+ years of full-time experience in security research, offensive security, or related fields. • Experience with finding vulnerabilities in source code • Experience creating PoC ...

Cmu

Security Researcher

Pittsburgh, PA · On-site

... security space. Our group focuses on applied research into the functionality of emerging and ... Full time/Part time Full time Pay Basis Salary More Information: * Please visit "Why Carnegie ...

Cmu

Network Security Researcher

Pittsburgh, PA · On-site

As a network security researcher on the Network Situational Awareness team, you will research ... Full time/Part time Full time Pay Basis Salary More Information: * Please visit "Why Carnegie ...

Cmu

Network Security Researcher

Arlington, VA · On-site

As a network security researcher on the Network Situational Awareness team, you will research ... Full time/Part time Full time Pay Basis Salary More Information: * Please visit "Why Carnegie ...

Cmu

Senior Security Researcher

Pittsburgh, PA

... security space. Our group focuses on applied research into the functionality of emerging and ... Full time/Part time Full time Pay Basis Salary More Information: * Please visit "Why Carnegie ...

next page

Showing results 1-20

All JobsSecurity Researcher JobsFull Time Security Researcher Jobs

Full Time Security Researcher information

See salary details

$47

$51

$54

How much do full time security researcher jobs pay per hour?

As of Aug 5, 2026, the average hourly pay for full time security researcher in the United States is $51.44, according to ZipRecruiter salary data. Most workers in this role earn between $49.76 and $53.12 per hour, depending on experience, location, and employer.

What is the difference between Full Time Security Researcher vs Penetration Tester?

AspectFull Time Security ResearcherPenetration Tester
CredentialsSecurity certifications (e.g., CISSP, OSCP), strong technical backgroundCertifications like CEH, OSCP, practical hacking skills
Work EnvironmentResearch labs, cybersecurity firms, corporate security teamsClient sites, security firms, consulting environments
Industry UsageDeveloping security tools, analyzing vulnerabilities, threat researchSimulating attacks to identify vulnerabilities, testing security measures

While both roles focus on cybersecurity, a Full Time Security Researcher primarily conducts in-depth research and develops security solutions, whereas a Penetration Tester actively tests systems for vulnerabilities through simulated attacks. Both roles require strong technical skills and certifications but differ in daily tasks and work settings.

More about Full Time Security Researcher jobs
What are the most commonly searched types of Security Researcher jobs? The most popular types of Security Researcher jobs are:
What job categories do people searching Full Time Security Researcher jobs look for? The top searched job categories for Full Time Security Researcher jobs are:
Full Time Security Researcher jobs near you
Infographic showing various Full Time Security Researcher job openings in the United States as of July 2026, with employment types broken down into 74% Full Time, 24% Part Time, and 2% Contract. Highlights an 96% Physical, 1% Hybrid, and 3% Remote job distribution, with an average salary of $107,000 per year, or $51.4 per hour.

Security Researcher

DepthFirst

San Francisco, CA • On-site

Full-time

Medical, Dental, Vision

Re-posted 18 days ago

Job description

About depthfirst
We believe that software is the foundation of modern civilization - yet vulnerabilities threaten its integrity, security, and resilience. We are on a mission to solve security.
depthfirst is building intelligence to detect and remediate critical software vulnerabilities. We are training and scaling security AI agents to discover zero-days vulnerabilities across large customer codebases and popular open source software.
Our founding team includes deep expertise in data, infrastructure, security and LLMs with technical leaders from DeepMind, Databricks, Square, and Faire. We are looking for strong technical people who are interested in working at the intersection of AI, Security, and Infrastructure.
About this role
We're seeking an experienced Security Researcher to join our effort in building and training AI agents for vulnerability discovery and exploitation.
We are building a technology capable of finding the next Log4J at scale, finding and remediating vulnerabilities in customer and open source codebases.
We are looking for strong security researchers with strong intuition to identify, analyze, and investigate application vulnerabilities. You'll collaborate with AI researchers and engineers to uncover novel attack vectors and contribute to the development of advanced detection and defense capabilities. Your work will play a crucial role in building a product that aims to redefine how companies do security.
You're excited about this role because you will...
  • Build a technology capable of finding novel vulnerabilities at scale both in open source and proprietary codebases
  • Develop techniques to reduce false positives leveraging automated exploitation, proof of concept generation and context inference
  • Work closely with engineers to understand limitations and design new methodologies to improve our system
  • Publish internal technical reports and contribute to security advisories as needed.
  • Work on a Product that Solves a Critical Problem - and we already have a handful of customers who have found it valuable in fixing some eye-opening vulnerabilities within the first few days of using our product.

Qualifications
  • 3+ years of full-time experience in security research, offensive security, or related fields.
  • Experience with finding vulnerabilities in source code
  • Experience creating PoC exploits for vulnerabilities
  • Programming experience in Python
  • A bachelor's degree in Computer Science/Software Engineering or equivalent industry experience
  • A love for technology, and an insatiable curiosity for new tools to tackle real problems
  • Capable of solving complex problems with simple solutions. Building reliable and scalable products, making right trade-offs along the way
  • A tendency to leave things in a better way than you found it

What We Offer
  • Competitive Salary with meaningful equity
  • Health, Vision, and Dental Insurance
  • Office lunch (when working from our San Francisco office)

depthfirst is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law.
To all recruitment agencies: depthfirst does not accept agency resumes. Please do not forward resumes to depthfirst employees. depthfirst is not responsible for any fees related to unsolicited resumes and will not pay fees to any third-party agency or company that does not have a signed agreement with the Company.

Apply