ZipRecruiter

Log In

1

Independent Security Researcher Jobs (NOW HIRING)

Cmu

Cybersecurity Operations Researcher

Pittsburgh, PA · On-site

... security data. * Work independently and collaboratively with multidisciplinary teams of varying ... Experience conducting research and publishing academic or technical papers. * Knowledge of ...

next page

Showing results 1-20

People also search for

All JobsIndependent Security Researcher Jobs

Independent Security Researcher information

See salary details

$47

$51

$54

How much do independent security researcher jobs pay per hour?

As of May 29, 2026, the average hourly pay for independent security researcher in the United States is $51.44, according to ZipRecruiter salary data. Most workers in this role earn between $49.76 and $53.12 per hour, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as an Independent Security Researcher, and why are they important?

To thrive as an Independent Security Researcher, you need a deep understanding of cybersecurity principles, vulnerability assessment, and programming or scripting languages, often supported by a relevant degree or recognized certifications like OSCP or CEH. Familiarity with penetration testing tools (e.g., Metasploit, Burp Suite), operating systems, and responsible disclosure processes is essential. Critical thinking, persistence, and effective communication help researchers uncover vulnerabilities and share findings responsibly. These skills are crucial to identifying security weaknesses, protecting systems, and building trust within the cybersecurity community.

What are some common challenges Independent Security Researchers face when working with organizations to disclose vulnerabilities?

Independent Security Researchers often encounter challenges such as varying responsiveness from organizations, legal ambiguity regarding responsible disclosure, and the need to clearly communicate technical findings to non-technical stakeholders. Establishing trust and credibility is essential, as some companies may initially be skeptical or unresponsive to external reports. Researchers must also stay current with evolving disclosure policies and frameworks to ensure their work is ethical and recognized, which often involves participating in bug bounty programs or coordinated vulnerability disclosure platforms.

What is an independent security researcher?

An independent security researcher is a professional who investigates and analyzes computer systems, networks, and software for vulnerabilities, often working outside of formal employment with a company or organization. These researchers typically identify security flaws, report them to affected parties, and may participate in bug bounty programs or publish their findings for public awareness. They play a vital role in the cybersecurity ecosystem by helping to uncover and address security weaknesses before malicious actors can exploit them.

What is the difference between Independent Security Researcher vs Penetration Tester?

AspectIndependent Security ResearcherPenetration Tester
CertificationsOSCP, CEH, CISSPOSCP, CEH, GPEN
Work EnvironmentSelf-directed, often freelance or contract-basedTypically employed by security firms or organizations
Industry UsageResearching vulnerabilities, discovering exploits, publishing findingsSimulating attacks to test security defenses

While both roles focus on cybersecurity, Independent Security Researchers primarily discover and analyze vulnerabilities independently, often publishing their findings. Penetration Testers conduct controlled security assessments for organizations, focusing on exploiting vulnerabilities to evaluate defenses. Both roles require similar certifications and skills but differ in work setting and objectives.

More about Independent Security Researcher jobs
What job categories do people searching Independent Security Researcher jobs look for? The top searched job categories for Independent Security Researcher jobs are:
Independent Security Researcher jobs near you
Infographic showing various Independent Security Researcher job openings in the United States as of May 2026, with employment types broken down into 1% As Needed, 64% Full Time, 26% Part Time, and 9% Contract. Highlights an 92% Physical, and 8% Remote job distribution, with an average salary of $107,000 per year, or $51.4 per hour.

Cybersecurity Operations Researcher

Cmu

Pittsburgh, PA • On-site

Full-time

Retirement

Posted 12 days ago

Job description

The CERT Security Operations team is dedicated to developing cutting-edge solutions that address critical and emerging cybersecurity challenges facing the United States Government and the international community. Our success depends on a diverse team of analysts, researchers, and engineers who are passionate about understanding emerging technologies and applying best practices to support U.S. Government defensive missions.

Our team provides technical guidance in capability and capacity development for Security Operations Centers (SOCs), National Cyber Centers, and Computer Security Incident Response Teams (CSIRTs). We partner with federal agencies, academic institutions, foreign governments, private industry, and non-profit organizations to strengthen cybersecurity operations globally.

We develop and implement strategic and operational procedures that advance the cybersecurity community's effectiveness. Our work includes regular collaboration with sponsors and partners to design, evaluate, and improve mission performance.

Our team contributes to technical initiatives by developing and prototyping innovative methods for evaluating and measuring operational and mission success. We design and deliver training and engagement programs across National Incident Response Teams, Product Security Teams, SOCs, and enterprise incident management programs.

We are seeking a Cybersecurity Operations Researcher to join our CERT Security Operations team. This role supports mission-driven cybersecurity initiatives focused on strengthening national and international security operations capabilities. The ideal candidate demonstrates interest and experience in developing and executing strategic and operational cybersecurity procedures, as well as advancing the state of the art in cyber operations research and practice.

Key Responsibilities

  • Conduct and support analytical studies involving risk, threat, and security data.
  • Work independently and collaboratively with multidisciplinary teams of varying experience levels.
  • Apply a strong understanding of enterprise cybersecurity and technology security challenges.
  • Utilize knowledge of computer network defense tools and processes, including leading commercial vendor solutions and open-source platforms.
  • Brief strategic and technical topics to senior leadership, technical and non-technical audiences, and foreign government officials.
  • Analyze current operational challenges and evolving threats facing network security and intelligence organizations.
  • Apply project planning and management methodologies to support program execution.
  • Engage international stakeholders with cultural awareness and professionalism.
  • Produce clear, well-structured technical documentation that translates complex processes for diverse audiences (writing sample may be requested).

Team deliverables include:

  • Technical publications
  • Industry and government conference presentations
  • Course development and delivery
  • Direct customer engagement
  • Prototype tools and methodologies

Requirements

  • You have BS in Computer Science or related discipline with eight (8) years of experience; OR MS in the same fields with five (5) years of experience; OR a PhD in the same fields with two (2) years of experience.
  • You have the willingness and ability to travel domestically and internationally (up to 40% on an annual basis) in support of the SEI mission.
  • You will be subject to a background investigation and must be able to obtain andmaintainan active Department ofWar(DoW) security clearance.

Desired Experience

  • Familiarity with critical infrastructure sectors.
  • Experience working within or in collaboration with a national Incident Response or Security Operations organization.
  • Demonstrated technical proficiency with modern computing hardware, software, and networking technologies.
  • Experience conducting research and publishing academic or technical papers.
  • Knowledge of cybersecurity metrics, measurement, and assessment methodologies.
  • Participation in public forums such as standards bodies, open-source projects, or professional publications.
  • Preferred certifications: CISSP, CEH, CISM, CompTIA Security+, or equivalent.

Why work here?

  • Join a world-class organization that continues to have a significant impact.
  • Work with cutting-edge technologies and dedicated experts to solve challenging problems for the government and the nation.
  • Access tuition benefits at Carnegie Mellon University and other institutions for employees and their dependent children.
  • Receive 8% monthly contribution for your retirement.
  • Maintain a healthy work/life balance including paid parental and military leave.
  • Take advantage of annual professional development opportunities.
  • Qualify for relocation assistance.

Location

Pittsburgh, PA

Job Function

Software/Applications Development/Engineering

Position Type

Staff - Regular

Full time/Part time

Full time

Pay Basis

SalaryMore Information:

  • Please visit "Why Carnegie Mellon" to learn more about becoming part of an institution inspiring innovations that change the world.

  • Click here to view a listing of employee benefits

  • Carnegie Mellon University is an Equal Opportunity Employer/Disability/Veteran.

  • Statement of Assurance

About CMU

Sourced by ZipRecruiter

Industry

Offices of mental health practitioners

Company size

201 - 500 Employees

Headquarters location

Harrisburg, PA, US

View All CMU Jobs

Apply