ZipRecruiter

Log In

2

Vulnerability Researcher Remote Jobs (NOW HIRING)

Paylocity

Vulnerability Assessment Engineer

This is a fully remote position, allowing you to work from home or location of record within the U ... Research, identify, assess, and prioritize vendor and third-party security advisories and acts as a ...

HID Global

Senior Product Vulnerability Manager

Austin, TX · Remote

$125K - $165K/yr

Remote (US & Europe) Job ID: 47562 As part of the Product Security and Privacy team, you will own ... Familiarity with Coordinated Vulnerability Disclosure (CVD) processes and external researcher ...

ASSA ABLOY

Senior Product Vulnerability Manager

Austin, TX · Remote

$125K - $165K/yr

Remote (US & Europe) Job ID: 47562 As part of the Product Security and Privacy team, you will own ... Familiarity with Coordinated Vulnerability Disclosure (CVD) processes and external researcher ...

ASSA ABLOY

Senior Product Vulnerability Manager

Austin, TX · Remote

$125K - $165K/yr

Remote (US & Europe) Job ID: 47562 As part of the Product Security and Privacy team, you will own ... Familiarity with Coordinated Vulnerability Disclosure (CVD) processes and external researcher ...

next page

Showing results 1-20

All JobsVulnerability Researcher Remote Jobs

Vulnerability Researcher Remote information

See salary details

$30K

$113.1K

$164.5K

How much do vulnerability researcher remote jobs pay per year?

As of Jun 19, 2026, the average yearly pay for vulnerability researcher remote in the United States is $113,102.00, according to ZipRecruiter salary data. Most workers in this role earn between $67,000.00 and $154,000.00 per year, depending on experience, location, and employer.

What are some common challenges faced by remote vulnerability researchers and how can they be addressed?

Remote vulnerability researchers often encounter challenges such as staying current with rapidly evolving threat landscapes, maintaining effective communication with distributed teams, and accessing secure lab environments for testing. To address these, it's important to regularly engage in professional development, participate in virtual security communities, and utilize secure cloud-based lab solutions. Additionally, setting clear communication protocols and using collaboration tools can help ensure smooth teamwork and project progress.

What is the difference between Vulnerability Researcher Remote vs Penetration Tester Remote?

AspectVulnerability Researcher RemotePenetration Tester Remote
CredentialsCertifications like OSCP, CEH, CISSP often preferredSimilar certifications, with emphasis on offensive security skills
Work EnvironmentResearch-focused, analyzing vulnerabilities in software and systemsSimulating attacks to identify security weaknesses
Industry UsageUsed in cybersecurity firms, tech companies, and research labsCommon in consulting firms, security service providers, and internal security teams
Search & Comparison IntentUnderstanding roles in vulnerability discovery and researchComparing offensive security roles and testing approaches

Vulnerability Researcher Remote and Penetration Tester Remote both focus on cybersecurity but differ in approach. Researchers analyze and discover vulnerabilities, while testers simulate attacks to evaluate security. Both roles require similar certifications and are employed in related industries, but their daily tasks and objectives vary.

What is vulnerability in a person?

In the context of a vulnerability researcher, vulnerability in a person refers to emotional openness or susceptibility to harm, which can impact their mental health and resilience. Recognizing personal vulnerabilities can help in understanding human behavior and improving security awareness, but the role primarily focuses on identifying technical weaknesses in systems. Skills such as psychological insight and communication are valuable when assessing human factors in cybersecurity.

What is another word for vulnerability?

In the context of a Vulnerability Researcher role, another word for vulnerability is weakness or flaw in a system's security that could be exploited. Identifying these vulnerabilities is essential for cybersecurity professionals to protect digital assets and improve system defenses. Common synonyms include flaw, defect, or security gap.

What are the 4 types of vulnerability?

In vulnerability research, the four main types of vulnerabilities are software vulnerabilities, hardware vulnerabilities, network vulnerabilities, and human vulnerabilities. Software vulnerabilities include bugs and coding errors; hardware vulnerabilities involve flaws in physical components; network vulnerabilities relate to insecure network configurations; and human vulnerabilities stem from social engineering or user errors. Understanding these categories helps vulnerability researchers identify and prioritize security risks effectively.

What are the key skills and qualifications needed to thrive as a Vulnerability Researcher (Remote), and why are they important?

To thrive as a Vulnerability Researcher (Remote), you need strong expertise in cybersecurity fundamentals, reverse engineering, and exploit development, typically supported by a degree in computer science or related certifications such as OSCP or CEH. Familiarity with technical tools like IDA Pro, Ghidra, fuzzers, debuggers, and scripting languages (e.g., Python) is essential for analyzing vulnerabilities. Analytical thinking, problem-solving, and effective communication are key soft skills that help in documenting findings and collaborating with distributed teams. These skills ensure the accurate identification and mitigation of security risks, which is crucial for protecting organizations against cyber threats.

What does a Vulnerability Researcher do, especially in a remote role?

A Vulnerability Researcher is responsible for identifying, analyzing, and reporting security weaknesses in software, hardware, or network systems. Working remotely, they use specialized tools and techniques to discover vulnerabilities, assess potential impacts, and sometimes develop proof-of-concept exploits. Their findings help organizations improve security by patching vulnerabilities before they can be exploited by malicious actors. Effective communication and collaboration with security teams are also important aspects of the role, even when working from afar.

What is the meaning of vulnerability?

In the context of a Vulnerability Researcher role, a vulnerability is a weakness or flaw in a system, software, or network that can be exploited by attackers to gain unauthorized access, cause damage, or compromise data. Identifying and analyzing vulnerabilities is essential for developing effective security measures and patches. This work often involves using tools like vulnerability scanners and understanding security protocols.
More about Vulnerability Researcher Remote jobs
What cities are hiring for Vulnerability Researcher Remote jobs? Cities with the most Vulnerability Researcher Remote job openings:
What are the most commonly searched types of Vulnerability Researcher jobs? The most popular types of Vulnerability Researcher jobs are:
What states have the most Vulnerability Researcher Remote jobs? States with the most job openings for Vulnerability Researcher Remote jobs include:
What job categories do people searching Vulnerability Researcher Remote jobs look for? The top searched job categories for Vulnerability Researcher Remote jobs are:
Vulnerability Researcher Remote jobs near you
CNO Software Engineer (TS/SCI w/ Poly)

CNO Software Engineer (TS/SCI w/ Poly)

SIXGEN

Annapolis Junction, MD • On-site, Remote

$250K - $300K/yr

Other

Medical, Dental, Vision, Life, Retirement, PTO

Posted 26 days ago

Job description

CNO Software Engineer (TS/SCI w/ Poly)

Annapolis Junction, MD.

SIXGEN's mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape.

Position Overview

Position: CNO Engineer Job Type: Full-time Location: Annapolis Junction, MD Clearance Requirements: Active TS/SCI with Polygraph required Experience: 7+ years (Team Lead opportunities available for candidates with 10+ years)

What You'll Do

We are seeking a skilled and motivated CNO Engineer to join our cybersecurity research and development team supporting mission-critical federal programs. This role sits at the intersection of software development, reverse engineering, vulnerability research, and advanced cybersecurity engineering.

The ideal candidate will possess deep expertise in low-level software development, operating system internals, reverse engineering, and vulnerability research, with the ability to develop innovative solutions that support complex mission requirements. You will work alongside a seasoned team of engineers developing modular capabilities that integrate into large-scale technical frameworks supporting national security missions.

Key Responsibilities Software Development & Engineering
  • Design, develop, and maintain modular software capabilities supporting mission objectives.
  • Develop solutions using C/C++, Python, Assembly, and related technologies.
  • Contribute to large-scale frameworks and mission-focused software platforms.
  • Apply modern software engineering principles to complex technical challenges.
Reverse Engineering & Vulnerability Research
  • Perform reverse engineering and vulnerability research across Windows, Linux, and embedded systems.
  • Analyze binaries, operating system internals, and network protocols to identify vulnerabilities and technical insights.
  • Utilize tools such as Ghidra and IDA Pro to support research and development efforts.
  • Conduct research involving embedded architectures, including ARM and MIPS platforms.
Cybersecurity Research & Technical Collaboration
  • Develop and enhance capabilities supporting cybersecurity research and mission-focused technical objectives.
  • Research and implement advanced technical solutions within complex operating environments.
  • Collaborate with fellow engineers, researchers, and technical teams to support mission objectives.
  • Contribute technical expertise to advanced cybersecurity research and capability development efforts.
Qualifications
  • 7+ years of experience in software development, reverse engineering, vulnerability research, cybersecurity engineering, or related disciplines.
  • Strong proficiency in C/C++ and Python.
  • Experience with Assembly language and low-level software development.
  • Experience using reverse engineering tools such as Ghidra or IDA Pro.
  • Strong understanding of Windows and Linux operating system internals.
  • Strong understanding of network protocols and communications.
  • Experience conducting reverse engineering and vulnerability research.
  • Knowledge of common cybersecurity research and software development methodologies.
  • Strong analytical, problem-solving, and technical communication skills.
Preferred Qualifications
  • Experience with embedded systems research, including ARM and MIPS architectures.
  • Experience developing capabilities for Windows and Linux environments.
  • Familiarity with persistence mechanisms and advanced system internals.
  • Experience supporting federal, intelligence community, or national security missions.
  • Previous technical leadership or team lead experience.

Compensation for this role will be based on experience, qualifications, technical expertise, and overall alignment with the position. The anticipated salary range for this role is $250,000 - $300,000 per year, depending on experience and qualifications. Additionally, SIXGEN offers top-tier benefits for full-time employees, including:

  • Employer-paid health insurance premiums (medical, dental, vision) for you and your family
  • Employer-paid short/long term disability insurance and basic life/AD&D insurance
  • 401K with a 4% employer contribution
  • Professional development reimbursement options available (training, certification, education, etc)
  • Flexible and remote work policies for most positions
  • Flexible PTO and holiday schedule

SIXGEN is an Equal Opportunity Employer. We ensure that all applicants are considered for employment without regard to race, color, religion, sexual orientation, gender identity, national origin, disability, age, marital status, ancestry, projected veteran status, or any other protected group or class.

We are committed to fostering an inclusive culture that values diversity in our people, reflecting the communities we serve and our customer base. We strive to attract and retain a diverse talent pool and create an environment where everyone is empowered to be their authentic selves at work.

Apply