ZipRecruiter

Log In

1

Security Researcher Jobs in California (NOW HIRING)

DepthFirst

Security Researcher

San Francisco, CA · On-site

About this role We're seeking an experienced Security Researcher to join our effort in building and training AI agents for vulnerability discovery and exploitation. We are building a technology ...

depthfirst

Security Researcher

San Francisco, CA · On-site

The Security Researcher will build technology for vulnerability discovery, collaborate with AI researchers, and contribute to developing advanced detection capabilities. Responsibilities : • Build ...

Apple

Offensive Security Researcher, SEAR

Cupertino, CA · On-site

You will join a team working with world-class offensive security researchers. The work is critical directly shapes the security posture of Apple. You will conduct offensive research into AI-specific ...

Apple

Offensive Security Researcher, SEAR

Cupertino, CA

$184K - $324K/yr

You will join a team working with world-class offensive security researchers. The work is critical directly shapes the security posture of Apple. You will conduct offensive research into AI-specific ...

LLNL

Senior Security Researcher

Livermore, CA · On-site

$9.7K/wk

S. security and promote global stability. Our mission spans four critical national security areas ... We have multiple openings for a Senior Research Scientist to lead efforts to develop techniques and ...

LLNL

Senior Security Researcher

Livermore, CA · On-site

S. security and promote global stability. Our mission spans four critical national security areas ... Wehave multiple openings fora Senior Research Scientist to lead efforts to develop techniques and ...

LLNL

Senior Security Researcher

Livermore, CA

S. security and promote global stability. Our mission spans four critical national security areas ... We have multiple openings for a Senior Research Scientist to lead efforts to develop techniques and ...

Apple

Firmware Security Researcher, SEAR

Cupertino, CA · On-site

As a Firmware Security Researcher, you will work with cutting edge technology alongside some of the most creative, passionate, hardworking engineers in the industry; collaborating with teams from ...

Apple

Firmware Security Researcher, SEAR

Cupertino, CA

$129K - $225K/yr

As a Firmware Security Researcher, you will work with cutting edge technology alongside some of the most creative, passionate, hardworking engineers in the industry; collaborating with teams from ...

next page

Showing results 1-20

All JobsSecurity Researcher JobsSecurity Researcher Jobs in California

Security Researcher information

See California salary details

$46

$50

$53

How much do security researcher jobs pay per hour?

As of Jul 29, 2026, the average hourly pay for security researcher in California is $50.77, according to ZipRecruiter salary data. Most workers in this role earn between $49.09 and $52.45 per hour, depending on experience, location, and employer.

What Is a Security Researcher?

A security researcher keeps up-to-date on all the latest developments in threats to computer software and networks. These threats include different types of malware, such as computer viruses, malicious software and scripts, and direct attacks on a network. The main duties of a security researcher are to investigate existing types of malware, analyze their capabilities, and attempt to predict new forms of malware to develop appropriate security responses. They may reverse engineer malware or test security systems.

What are Security Researchers?

Security Researchers are professionals who analyze computer systems, networks, and software to identify vulnerabilities and potential security threats. They often discover new types of cyberattacks, develop tools or methods to test for weaknesses, and recommend ways to improve security. Security Researchers may work for private companies, government agencies, or independently, and they play a crucial role in preventing cybercrime by staying ahead of hackers. Their work often involves reverse engineering, penetration testing, and publishing their findings to help strengthen cybersecurity across the industry.

Can I make $200,000 a year in cyber security?

Security Researchers can potentially earn $200,000 or more annually, especially with advanced skills, certifications, and experience in high-demand areas like penetration testing or threat analysis. Salaries vary based on industry, location, and level of expertise, with senior roles and specialized skills commanding higher pay.

What is the difference between Security Researcher vs Security Analyst?

AspectSecurity ResearcherSecurity Analyst
CredentialsCertifications like CISSP, CEH, OSCPCertifications like CompTIA Security+, CISSP, GIAC
Work EnvironmentResearch labs, cybersecurity firms, R&D teamsSecurity operations centers, corporate IT teams
Employer & IndustryTech companies, cybersecurity firms, government agenciesFinancial institutions, healthcare, enterprise companies
Primary FocusIdentifying vulnerabilities, developing exploits, analyzing threatsMonitoring security systems, incident response, implementing security measures

While both roles focus on cybersecurity, Security Researchers primarily analyze vulnerabilities and develop exploits to understand threats better. Security Analysts focus on monitoring, detecting, and responding to security incidents within organizations. Both roles often require similar certifications and work in related environments, but their core responsibilities differ in scope and daily tasks.

What does a security researcher do?

A security researcher analyzes computer systems, networks, and software to identify vulnerabilities and develop ways to protect against cyber threats. They often use tools like penetration testing and vulnerability scanners and may hold certifications such as CISSP or CEH. Their work helps improve cybersecurity defenses and prevent cyberattacks.

How to get a job as a security researcher?

To become a security researcher, develop strong knowledge of cybersecurity principles, programming, and network protocols. Obtain relevant certifications such as CISSP or CEH, gain experience through internships or labs, and stay updated on current security threats and tools like Wireshark or Metasploit.

How much do security researchers make in the US?

Security researchers in the US typically earn a median salary of around $100,000 per year, with entry-level positions starting at approximately $70,000 and experienced professionals earning over $130,000. Salaries vary based on experience, certifications, and the complexity of the security environment they work in.

What are the key skills and qualifications needed to thrive as a Security Researcher, and why are they important?

To thrive as a Security Researcher, you need deep expertise in computer science, networking, vulnerability assessment, and malware analysis, often supported by a degree in cybersecurity or related fields. Familiarity with tools like IDA Pro, Wireshark, Metasploit, and certifications such as OSCP or CEH is highly valued. Analytical thinking, curiosity, and strong written and verbal communication help distinguish top performers in this role. These skills are crucial for identifying emerging threats, effectively communicating risks, and developing solutions to protect organizations' digital assets.

What are some common challenges Security Researchers face when collaborating with development teams?

Security Researchers often encounter challenges when working with development teams, such as communicating complex vulnerabilities in a way that is actionable for developers and aligning on remediation priorities. Bridging the gap between security findings and practical implementation requires clear documentation and a collaborative mindset. Additionally, researchers must balance thorough testing with minimal disruption to production environments, ensuring security improvements integrate smoothly into development cycles.
More about Security Researcher jobs
What are the most commonly searched types of Security Researcher jobs in California? The most popular types of Security Researcher jobs in California are:
What are popular job titles related to Security Researcher jobs in California? For Security Researcher jobs in California, the most frequently searched job titles are:
What job categories do people searching Security Researcher jobs in California look for? The top searched job categories for Security Researcher jobs in California are:
What cities in California are hiring for Security Researcher jobs? Cities in California with the most Security Researcher job openings:
What are popular job titles related to Security Researcher jobs in CA? For Security Researcher jobs in CA, the most frequently searched job titles are:
Security Researcher jobs near you
Infographic showing various Security Researcher job openings in California as of July 2026, with employment types broken down into 85% Full Time, 9% Part Time, 1% Temporary, 4% Contract, and 1% Summer. Highlights an 88% Physical, 4% Hybrid, and 8% Remote job distribution, with an average salary of $105,598 per year, or $50.8 per hour.

Security Researcher

DepthFirst

San Francisco, CA • On-site

Full-time

Medical, Dental, Vision

Re-posted 11 days ago

Job description

About depthfirst
We believe that software is the foundation of modern civilization - yet vulnerabilities threaten its integrity, security, and resilience. We are on a mission to solve security.
depthfirst is building intelligence to detect and remediate critical software vulnerabilities. We are training and scaling security AI agents to discover zero-days vulnerabilities across large customer codebases and popular open source software.
Our founding team includes deep expertise in data, infrastructure, security and LLMs with technical leaders from DeepMind, Databricks, Square, and Faire. We are looking for strong technical people who are interested in working at the intersection of AI, Security, and Infrastructure.
About this role
We're seeking an experienced Security Researcher to join our effort in building and training AI agents for vulnerability discovery and exploitation.
We are building a technology capable of finding the next Log4J at scale, finding and remediating vulnerabilities in customer and open source codebases.
We are looking for strong security researchers with strong intuition to identify, analyze, and investigate application vulnerabilities. You'll collaborate with AI researchers and engineers to uncover novel attack vectors and contribute to the development of advanced detection and defense capabilities. Your work will play a crucial role in building a product that aims to redefine how companies do security.
You're excited about this role because you will...
  • Build a technology capable of finding novel vulnerabilities at scale both in open source and proprietary codebases
  • Develop techniques to reduce false positives leveraging automated exploitation, proof of concept generation and context inference
  • Work closely with engineers to understand limitations and design new methodologies to improve our system
  • Publish internal technical reports and contribute to security advisories as needed.
  • Work on a Product that Solves a Critical Problem - and we already have a handful of customers who have found it valuable in fixing some eye-opening vulnerabilities within the first few days of using our product.

Qualifications
  • 3+ years of full-time experience in security research, offensive security, or related fields.
  • Experience with finding vulnerabilities in source code
  • Experience creating PoC exploits for vulnerabilities
  • Programming experience in Python
  • A bachelor's degree in Computer Science/Software Engineering or equivalent industry experience
  • A love for technology, and an insatiable curiosity for new tools to tackle real problems
  • Capable of solving complex problems with simple solutions. Building reliable and scalable products, making right trade-offs along the way
  • A tendency to leave things in a better way than you found it

What We Offer
  • Competitive Salary with meaningful equity
  • Health, Vision, and Dental Insurance
  • Office lunch (when working from our San Francisco office)

depthfirst is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law.
To all recruitment agencies: depthfirst does not accept agency resumes. Please do not forward resumes to depthfirst employees. depthfirst is not responsible for any fees related to unsolicited resumes and will not pay fees to any third-party agency or company that does not have a signed agreement with the Company.

Apply