ZipRecruiter

Log In

1

Security Researcher Jobs (NOW HIRING)

depthfirst

Security Researcher

San Francisco, CA · On-site

Security Researcher We believe that software is the foundation of modern civilization - yet vulnerabilities threaten its integrity, security, and resilience. We are on a mission to solve security ...

DepthFirst

Security Researcher

San Francisco, CA · On-site

About this role We're seeking an experienced Security Researcher to join our effort in building and training AI agents for vulnerability discovery and exploitation. We are building a technology ...

OpenReq

Security Researcher

Security Researcher Opportunity Red Balloon Security is a leading security provider and research firm committed to defending embedded devices across a range of critical industries and shaping the ...

Reco

Security Researcher

Wilmington, DE · On-site +1

You will work closely with security researchers and customers to identify emerging threats and improve detection capabilities across SaaS environments. Responsibilities * Threat Analysis and Research:

RECO USA

Security Researcher

You will work closely with security researchers and customers to identify emerging threats and improve detection capabilities across SaaS environments. Responsibilities * Threat Analysis and Research:

Corgea

Security Researcher

Corgea is seeking a passionate Security Researcher to uncover, analyze, and prevent vulnerabilities in modern software. This role involves researching detection methods for emerging vulnerabilities ...

Microsoft

Security Researcher

Redmond, WA · On-site

$102K - $202K/yr

We are looking for a Security Researcher with demonstrated cybersecurity and agents testing experience for our team. Our mission is to innovate cutting edge AI testing techniques while stress testing ...

SecSrvr

Software Security Researcher

Houston, TX · On-site

About the Software Security Researcher position We are looking for an experienced Security Engineer who will analyze our software designs and implementations from a security perspective, in order to ...

TenEx

Senior Security Researcher

Scottsdale, AZ · On-site

Senior Security Researcher The research is what sets a disruptive MDR apart, and at TENEX it drives everything we detect. As Senior Security Researcher, you'll study emerging adversary behavior ...

TenEx

Senior Security Researcher

Sarasota, FL · On-site

Senior Security Researcher The research is what sets a disruptive MDR apart, and at TENEX it drives everything we detect. As Senior Security Researcher, you'll study emerging adversary behavior ...

Tenzai

Application Security Researcher (US)

Application Security Researcher (US) Join Tenzai as Application Security Researcher (US). This is a rare opportunity to work at the intersection of offensive security and AI -- and to have your ...

Microsoft Corporation

Security Researcher

Redmond, WA · On-site

$102K - $202K/yr

We are looking for a Security Researcher with demonstrated cybersecurity and agents testing experience for our team. Our mission is to innovate cutting edge AI testing techniques while stress testing ...

TenEx

Senior Security Researcher

Kansas City, MO · On-site

Senior Security Researcher The research is what sets a disruptive MDR apart, and at TENEX it drives everything we detect. As Senior Security Researcher, you'll study emerging adversary behavior ...

Cmu

AI Security Researcher

Pittsburgh, PA · On-site +1

Are you excited about pioneering new research areas that will impact academia, industry, and national security? If so, we want you for our team, where you'll collaborate to deliver high-quality ...

Netwrix Corporation

Senior Security Researcher

Position Overview Netwrix is seeking a Security Researcher with expertise in Active Directory and Entra ID to join our security research team. This role focuses on hands-on research into Active ...

next page

Showing results 1-20

All JobsSecurity Researcher Jobs

Security Researcher information

See salary details

$47

$51

$54

How much do security researcher jobs pay per hour?

As of Aug 29, 2026, the average hourly pay for security researcher in the United States is $51.44, according to ZipRecruiter salary data. Most workers in this role earn between $49.76 and $53.12 per hour, depending on experience, location, and employer.

What is a security researcher?

A security researcher keeps up-to-date on all the latest developments in threats to computer software and networks. These threats include different types of malware, such as computer viruses, malicious software and scripts, and direct attacks on a network. The main duties of a security researcher are to investigate existing types of malware, analyze their capabilities, and attempt to predict new forms of malware to develop appropriate security responses. They may reverse engineer malware or test security systems.

What are the key skills and qualifications needed to thrive as a security researcher, and why are they important?

To thrive as a Security Researcher, you need deep expertise in computer science, networking, vulnerability assessment, and malware analysis, often supported by a degree in cybersecurity or related fields. Familiarity with tools like IDA Pro, Wireshark, Metasploit, and certifications such as OSCP or CEH is highly valued. Analytical thinking, curiosity, and strong written and verbal communication help distinguish top performers in this role. These skills are crucial for identifying emerging threats, effectively communicating risks, and developing solutions to protect organizations' digital assets.

What are some common challenges security researchers face when collaborating with development teams?

Security Researchers often encounter challenges when working with development teams, such as communicating complex vulnerabilities in a way that is actionable for developers and aligning on remediation priorities. Bridging the gap between security findings and practical implementation requires clear documentation and a collaborative mindset. Additionally, researchers must balance thorough testing with minimal disruption to production environments, ensuring security improvements integrate smoothly into development cycles.

What is the difference between Security Researcher vs Security Analyst?

AspectSecurity ResearcherSecurity Analyst
CredentialsCertifications like CISSP, CEH, OSCPCertifications like CompTIA Security+, CISSP, GIAC
Work EnvironmentResearch labs, cybersecurity firms, R&D teamsSecurity operations centers, corporate IT teams
Employer & IndustryTech companies, cybersecurity firms, government agenciesFinancial institutions, healthcare, enterprise companies
Primary FocusIdentifying vulnerabilities, developing exploits, analyzing threatsMonitoring security systems, incident response, implementing security measures

While both roles focus on cybersecurity, Security Researchers primarily analyze vulnerabilities and develop exploits to understand threats better. Security Analysts focus on monitoring, detecting, and responding to security incidents within organizations. Both roles often require similar certifications and work in related environments, but their core responsibilities differ in scope and daily tasks.

What do you need to be a security researcher?

A security researcher typically needs a strong understanding of cybersecurity principles, programming skills, and knowledge of networks and systems. Relevant certifications like CISSP or CEH can enhance credibility, and familiarity with tools such as Wireshark or penetration testing frameworks is beneficial. A bachelor's degree in computer science, information technology, or a related field is often required, along with analytical and problem-solving skills.
More about Security Researcher jobs

What cities are hiring for Security Researcher jobs?

Cities with the most Security Researcher job openings:

What are the most commonly searched types of Security Researcher jobs?

The most popular types of Security Researcher jobs are:

Who are the top companies hiring for Security Researcher jobs?

The top employers for Security Researcher jobs are:

What states have the most Security Researcher jobs?

States with the most job openings for Security Researcher jobs include:

What job categories do people searching Security Researcher jobs look for?

The top searched job categories for Security Researcher jobs are:

What are popular job titles related to Security Researcher jobs?

For Security Researcher jobs, the most frequently searched job titles are:

Security Researcher jobs near you
Infographic showing various Security Researcher job openings in the United States as of August 2026, with employment types broken down into 88% Full Time, 10% Part Time, and 2% Contract. Highlights an 93% Physical, 2% Hybrid, and 5% Remote job distribution, with an average salary of $107,000 per year, or $51.4 per hour.

Security Researcher

depthfirst

San Francisco, CA • On-site

Other

Medical, Dental, Vision

Re-posted yesterday

Job description

Security Researcher

We believe that software is the foundation of modern civilization - yet vulnerabilities threaten its integrity, security, and resilience. We are on a mission to solve security.

depthfirst is building intelligence to detect and remediate critical software vulnerabilities. We are training and scaling security AI agents to discover zero-days vulnerabilities across large customer codebases and popular open source software.

Our founding team includes deep expertise in data, infrastructure, security and LLMs with technical leaders from DeepMind, Databricks, Square, and Faire. We are looking for strong technical people who are interested in working at the intersection of AI, Security, and Infrastructure.

We're seeking an experienced Security Researcher to join our effort in building and training AI agents for vulnerability discovery and exploitation.

We are building a technology capable of finding the next Log4J at scale, finding and remediating vulnerabilities in customer and open source codebases.

We are looking for strong security researchers with strong intuition to identify, analyze, and investigate application vulnerabilities. You'll collaborate with AI researchers and engineers to uncover novel attack vectors and contribute to the development of advanced detection and defense capabilities. Your work will play a crucial role in building a product that aims to redefine how companies do security.

You're excited about this role because you will…

  • Build a technology capable of finding novel vulnerabilities at scale both in open source and proprietary codebases
  • Develop techniques to reduce false positives leveraging automated exploitation, proof of concept generation and context inference
  • Work closely with engineers to understand limitations and design new methodologies to improve our system
  • Publish internal technical reports and contribute to security advisories as needed.
  • Work on a Product that Solves a Critical Problem - and we already have a handful of customers who have found it valuable in fixing some eye-opening vulnerabilities within the first few days of using our product.

Qualifications

  • 3+ years of full-time experience in security research, offensive security, or related fields.
  • Experience with finding vulnerabilities in source code
  • Experience creating PoC exploits for vulnerabilities
  • Programming experience in Python
  • A bachelor's degree in Computer Science/Software Engineering or equivalent industry experience
  • A love for technology, and an insatiable curiosity for new tools to tackle real problems
  • Capable of solving complex problems with simple solutions. Building reliable and scalable products, making right trade-offs along the way
  • A tendency to leave things in a better way than you found it

What We Offer

  • Competitive Salary with meaningful equity
  • Health, Vision, and Dental Insurance
  • Office lunch (when working from our San Francisco office)

depthfirst is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law.

To all recruitment agencies: depthfirst does not accept agency resumes. Please do not forward resumes to depthfirst employees. depthfirst is not responsible for any fees related to unsolicited resumes and will not pay fees to any third-party agency or company that does not have a signed agreement with the Company.

Apply