ZipRecruiter

Log In

2

Remote Cybersecurity Researcher Jobs in New York

Mercor

Cybersecurity GRC Evaluator - Expert

New York, NY · Remote

$80 - $120/hr

About the job Mercor connects elite creative and technical talent with leading AI research labs ... Remote Role Responsibilities * Evaluate AI-generated artifacts against domain-specific quality ...

New

Jj

Senior Manager, Threat Hunting

Raritan, NJ · On-site +1

$113K - $153K/yr

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

The primary location for this position is Raritan, NJ and can be remote in the U.S. This role will ... in cybersecurity automation and AI. * Research and development agentic based detections and ...

Johnson and Johnson

Senior Manager, Threat Hunting

Raritan, NJ · On-site +1

$113K - $153K/yr

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

The primary location for this position is Raritan, NJ and can be remote in the U.S. This role will ... in cybersecurity automation and AI. * Research and development agentic based detections and ...

Johnson & Johnson

Senior Manager, Threat Hunting

Raritan, NJ · On-site +1

$113K - $153K/yr

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

The primary location for this position is Raritan, NJ and can be remote in the U.S. This role will ... in cybersecurity automation and AI. * Research and development agentic based detections and ...

next page

Showing results 1-20

All JobsCybersecurity Researcher JobsRemote Cybersecurity Researcher JobsRemote Cybersecurity Researcher Jobs in New York

Remote Cybersecurity Researcher information

What does a remote cybersecurity researcher do?

A Remote Cybersecurity Researcher analyzes security threats, vulnerabilities, and cyberattack trends to help organizations protect their digital assets. They conduct research on emerging technologies, develop detection tools, and often collaborate with other security professionals to improve cyber defenses—all while working from a remote location. Their work may involve publishing findings, reverse engineering malware, and advising on best practices for cybersecurity.

What are the key skills and qualifications needed to thrive as a remote cybersecurity researcher?

To thrive as a Remote Cybersecurity Researcher, you need deep expertise in computer networks, cryptography, threat analysis, and relevant degrees or certifications such as CISSP or CEH. Familiarity with tools like Wireshark, Metasploit, and various programming languages (e.g., Python, C++) is typically required. Outstanding problem-solving, self-motivation, and strong written communication are vital soft skills for remote collaboration and effective reporting. These skills ensure you can identify, analyze, and mitigate cybersecurity threats efficiently while working independently in a distributed team environment.

What are some common challenges faced by remote cybersecurity researchers, and how can they overcome them?

Remote cybersecurity researchers often encounter challenges such as maintaining secure access to sensitive data, staying up-to-date with evolving threats, and collaborating effectively with distributed teams. To overcome these, it's important to use secure VPNs and regularly updated security tools, engage in continuous learning through online courses and threat intelligence feeds, and leverage collaboration platforms like Slack or Microsoft Teams to share findings and coordinate projects. Building a strong routine and proactively communicating with colleagues can also help remote researchers stay productive and connected.

What is the difference between Remote Cybersecurity Researcher vs Remote Security Analyst?

AspectRemote Cybersecurity ResearcherRemote Security Analyst
CertificationsCompTIA Security+, CISSP, CEHCompTIA Security+, CISSP, GIAC Security Essentials
Work EnvironmentResearch labs, cybersecurity firms, remote research projectsSecurity operations centers, corporate IT teams, remote monitoring
Primary FocusIdentifying vulnerabilities, developing exploits, researching threatsMonitoring security systems, incident response, implementing security measures
Industry UsageCybersecurity research companies, academia, government agenciesBusinesses, financial institutions, healthcare, government agencies

Remote Cybersecurity Researchers focus on discovering vulnerabilities and researching threats, often working in labs or research settings. In contrast, Remote Security Analysts monitor and respond to security incidents within organizations. Both roles require similar certifications but serve different functions in cybersecurity operations.

What are the most commonly searched types of Cybersecurity Researcher jobs in New York?

The most popular types of Cybersecurity Researcher jobs in New York are:

What are popular job titles related to Remote Cybersecurity Researcher jobs in New York?

For Remote Cybersecurity Researcher jobs in New York, the most frequently searched job titles are:

What job categories do people searching Remote Cybersecurity Researcher jobs in New York look for?

The top searched job categories for Remote Cybersecurity Researcher jobs in New York are:

What cities in New York are hiring for Remote Cybersecurity Researcher jobs?

Cities in New York with the most Remote Cybersecurity Researcher job openings:

Remote Cybersecurity Researcher jobs near you

Cybersecurity Researcher - Fully Remote | Upto $250/hr

Mercor

New York, NY • Remote

$250/hr

Full-time

Posted 9 days ago

Job description

About the job

Mercor connects elite creative and technical talent with leading AI research labs. Headquartered in San Francisco, our investors include Benchmark, General Catalyst, Peter Thiel, Adam D'Angelo, Larry Summers, and Jack Dorsey.

Position: Cybersecurity Research Expert – Offensive Security & Vulnerability Research
Type: Contract
Compensation: $200–$250/hour
Location: Remote

Role Responsibilities

  • Evaluate AI-generated analyses of complex cybersecurity scenarios, exploits, and vulnerability reports.
  • Review technical writeups for correctness, exploitability, and mitigation quality.
  • Validate vulnerability root-cause analysis across software, operating systems, networking, cloud, and web applications.
  • Provide structured feedback on security reasoning, exploit chains, and defensive recommendations.
  • Contribute to benchmark development for advanced AI security capabilities.
  • Work independently and asynchronously to meet deadlines while improving AI model performance.

Qualifications

Must-Have

  • Member of a top-ranked Capture The Flag (CTF) team with demonstrated competitive achievements.
  • Discoverer or co-author of CVEs affecting widely used open-source or commercial software.
  • Publicly recognised bug bounty researcher with findings accepted by major programs (e.g., Google, Microsoft, Apple, Meta, GitHub, Mozilla, Chromium, Kubernetes, Linux Foundation, etc.).
  • Research experience at a well-respected security laboratory or academic research group.
  • Author of high-quality security research publications, conference papers, or widely cited technical writeups.
  • Strong understanding of exploit development, reverse engineering, binary analysis, vulnerability research, operating systems, networks, web security, or cryptography.

Preferred

  • Professional experience in offensive security, application security, vulnerability research, product security, or security engineering.
  • Experience with reverse engineering tools such as IDA Pro, Ghidra, Binary Ninja, or Radare2.
  • Familiarity with fuzzing, symbolic execution, static analysis, or dynamic analysis frameworks.
  • Experience with Linux internals, Windows internals, browser security, cloud security, embedded security, or mobile security.
  • Strong programming skills in C/C++, Rust, Python, Go, or Java.
  • Excellent written communication and ability to explain complex security concepts clearly.

Nice to Have

  • Hall of Fame recognition from major bug bounty programs.
  • Black Hat, DEF CON, USENIX Security, IEEE S&P, ACM CCS, NDSS, or similar conference presentations/publications.
  • Maintainer or significant contributor to well-known open-source security tools.
  • Offensive Security certifications (OSCP, OSEP, OSCE3), GIAC certifications, or equivalent credentials.

Application Process (Takes 20–30 mins to complete)

  • Upload resume
  • AI interview based on your resume
  • Submit form

Resources & Support

  • For details about the interview process and platform information, please check: https://talent.docs.mercor.com/welcome
  • For any help or support, reach out to: support@mercor.com

PS: Our team reviews applications daily. Please complete your AI interview and application steps to be considered for this opportunity.