As a Lead Security Research Engineer, you will provide technical leadership for vulnerability research, exploit analysis, exposure validation, and vulnerability signature development across the Qualys security platform. You will lead initiatives to identify, validate, and prioritise security risks based on real-world exploitability, helping customers distinguish theoretical exposures from confirmed attack paths.
Responsibilities
Lead vulnerability research initiatives across operating systems, databases, enterprise applications, cloud services, container platforms, and network devices.
Research newly disclosed, N-day, and actively exploited vulnerabilities.
Lead the development of exploit-based exposure validation techniques to confirm real-world exploitability of vulnerabilities.
Review technical designs, research methodologies, and code contributions to ensure quality and consistency.
Partner with Engineering and Product teams to influence roadmap decisions and security content strategy.
Requirements
Bachelor's degree in a relevant field (or equivalent experience)
This role provides advanced offensive cybersecurity expertise, focusing on the planning and execution of complex Red Team and Purple Team engagements. You will own the technical planning and delivery of these engagements — from scoping and test plans through execution, remediation verification, and formal reporting.
Compensation
The expected salary/wage range for this position is provided below. Actual offer may vary based upon geographic location, work experience, education/or skill level. United States of America: Annual Salary 160,000 - 325,000; California 141,000 - 325,000; District of Columbia, Maryland, North Carolina, Texas & Washington
Responsibilities
Plan and execute full-scope adversary emulation campaigns.
Conduct multi-stage operations across enterprise environments.
Partner with detection and defensive teams to validate controls and test detection coverage.
Translate offensive activity into measurable defensive improvements.
Conduct offensive security research and custom tooling development.
Lead advanced offensive cybersecurity engagements as a Red Team Engineer, planning, executing, and reporting on adversary emulation campaigns and developing tooling and AI solutions to enhance security posture.
Compensation
The expected salary/wage range for this position is provided below. Actual offer may vary from this range based upon geographic location, work experience, education/training, and/or skill level. – United States of America: Annual Salary USD 160,000 - 325,000 in California // 141,000 - 325,000 in District of Columbia & Maryland & North Carolina & Texas & Virginia & Washington
Responsibilities
Plan and execute full-scope adversary emulation campaigns
Partner with detection teams to validate controls and improve defenses
Conduct offensive security research and develop custom tooling
Automate testing and develop internal Red Team tools
Provide technical planning and delivery of Red Team and Purple Team engagements
Requirements
Master’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent
Lead advanced offensive cybersecurity engagements as a Senior Principal Red Team Engineer, planning, executing, and reporting on complex Red Team and Purple Team operations.
Compensation
The expected salary/wage range for this position is provided below. Actual offer may vary from this range based upon geographic location, work experience, education/training, and/or skill level. – United States of America: Annual Salary USD 160,000 - 325,000 in California // 141,000 - 325,000 in District of Columbia & Maryland & North Carolina & Texas & Virginia & Washington
Responsibilities
Plan and execute full-scope adversary emulation campaigns
Conduct multi-stage operations across enterprise environments
Apply disciplined operational tradecraft to achieve objectives
Partner with detection and defensive teams to validate controls
Translate offensive activity into measurable defensive improvements
Requirements
Master’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent
Nice to have: Credited CVEs
Nice to have: Bug bounty participation
Nice to have: Security blogging
Nice to have: Publicly available quality code or tools
Senior Principal Red Team Engineer responsible for planning and executing advanced offensive cybersecurity engagements, developing tools, and leading AI-driven red team operations.
Compensation
The expected salary/wage range for this position is provided below. Actual offer may vary from this range based upon geographic location, work experience, education/training, and/or skill level. – United States of America: Annual Salary USD 160,000 - 325,000 in California // 141,000 - 325,000 in District of Columbia & Maryland & North Carolina & Texas & Virginia & Washington
Responsibilities
Plan and execute full-scope adversary emulation campaigns
Partner with detection and defensive teams to validate controls
Continuously conduct offensive security research and custom tooling development
Build and operate AI harnesses for red team operations
Requirements
Master’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent
Nice to have: Credited CVEs
Nice to have: Bug bounty participation
Nice to have: Security blogging
Nice to have: Publicly available quality code or tools
Lead end-to-end red team operations and intelligence-led Purple Team exercises across cloud, CI/CD, endpoint, identity, application, and AI environments.
Responsibilities
Lead end-to-end red team operations and intelligence-led Purple Team exercises
Develop command-and-control tooling, implants, payload delivery mechanisms, and operator workflows
Red team AI systems including internal copilots, agentic workflows, and MLOps environments
Use AI tools to improve research, automation, payload development, reporting, and operational planning
Translate red team findings and threat intelligence into clear engineering actions
Lead and execute red team operations, develop offensive tooling, and provide threat intelligence to strengthen Grab's security posture across cloud, CI/CD, endpoint, identity, application, and AI environments.
Responsibilities
Lead end-to-end red team operations and intelligence-led Purple Team exercises
Develop command-and-control tooling, implants, payload delivery mechanisms, and operator workflows
Red team AI systems, including internal copilots, agentic workflows, AI-assisted operational tools, and MLOps environments
Use AI tools to improve research, automation, payload development, reporting, operational planning, and analysis of defensive coverage
Translate red team findings and threat intelligence into clear engineering actions
Lead AI‑assisted vulnerability research, designing and building AI/security harnesses to discover, validate, and report high‑impact vulnerabilities in real‑world software and open‑source projects.
Compensation
$172,100.00 - $278,300.00/yr
Responsibilities
Design, build, and improve AI/security harnesses for vulnerability research
Produce high‑quality research artifacts and technical reports
Conduct deep technical analysis across real‑world software and open‑source projects
Build reusable research infrastructure and automation pipelines
Use LLMs, AI agents, fuzzing, static/dynamic analysis, reverse engineering, and security automation to improve research workflows
Requirements
Master's degree in Computer Science, Cybersecurity, or a related technical field
Nice to have: PhD in Computer Science, Cybersecurity, AI/ML, Systems, Programming Languages
As a Senior Security Researcher, you will be at the forefront of cyber defense, focusing on vulnerability research, reverse engineering, and exploit development using cutting-edge AI models to create agentic defenders and autonomous systems.
Compensation
$147,600.00 - $238,700.00/yr
Responsibilities
Conduct advanced vulnerability research, reverse engineering, fuzzing, root-cause analysis, and exploit development across various platforms.
Leverage Large Language Models (LLMs) and advanced ML techniques to automate and scale bug hunting across diverse domains, including Web, OS & Kernel, Software Supply Chain, OT/IoT, and Browser Security.
Use AI agents to accelerate PoC generation, exploitability analysis, and finding validation, with an emphasis on reducing false positives.
Design and deploy AI-guided fuzzers, smart static/dynamic analysis tools, and autonomous agentic workflows specifically built for vulnerability research.
Develop and utilize agent harnesses for vulnerability discovery, PoC validation, patch validation, and defensive security research workflows.
Requirements
Bachelor's degree in Computer Science, Cybersecurity, or a related technical field
Nice to have: Master's degree or PhD in a relevant field
Nice to have: AI/ML models (LLMs, Reinforcement Learning)
Lead the technical strategy for offensive security across TP‑Link’s embedded product portfolio, conducting advanced penetration tests, vulnerability research, and tool development.
Compensation
Salary Range: $220,000-$230,000
Responsibilities
Define and execute enterprise technical strategy for penetration testing of embedded devices and IoT ecosystems
Lead complex, high‑risk penetration tests and architecture‑level security assessments
Conduct vulnerability research, develop proof‑of‑concept exploits, and analyze root causes
Establish threat‑modeling practices and advise on secure design decisions
Architect and develop custom security tools, fuzzing harnesses, and automated testing platforms
Requirements
Bachelor's degree in computer science, Computer Engineering, Electrical Engineering, Information Security, or related field
Senior Principal - Red Team EngineerNewHPE · Remote, US