As a Lead Security Research Engineer, you will provide technical leadership for vulnerability research, exploit analysis, exposure validation, and vulnerability signature development across the Qualys security platform. You will lead initiatives to identify, validate, and prioritise security risks based on real-world exploitability, helping customers distinguish theoretical exposures from confirmed attack paths.
Responsibilities
Lead vulnerability research initiatives across operating systems, databases, enterprise applications, cloud services, container platforms, and network devices.
Research newly disclosed, N-day, and actively exploited vulnerabilities.
Lead the development of exploit-based exposure validation techniques to confirm real-world exploitability of vulnerabilities.
Review technical designs, research methodologies, and code contributions to ensure quality and consistency.
Partner with Engineering and Product teams to influence roadmap decisions and security content strategy.
Requirements
Bachelor's degree in a relevant field (or equivalent experience)
This role provides advanced offensive cybersecurity expertise, focusing on the planning and execution of complex Red Team and Purple Team engagements. You will own the technical planning and delivery of these engagements — from scoping and test plans through execution, remediation verification, and formal reporting.
Compensation
The expected salary/wage range for this position is provided below. Actual offer may vary based upon geographic location, work experience, education/or skill level. United States of America: Annual Salary 160,000 - 325,000; California 141,000 - 325,000; District of Columbia, Maryland, North Carolina, Texas & Washington
Responsibilities
Plan and execute full-scope adversary emulation campaigns.
Conduct multi-stage operations across enterprise environments.
Partner with detection and defensive teams to validate controls and test detection coverage.
Translate offensive activity into measurable defensive improvements.
Conduct offensive security research and custom tooling development.
Lead advanced offensive cybersecurity engagements as a Red Team Engineer, planning, executing, and reporting on adversary emulation campaigns and developing tooling and AI solutions to enhance security posture.
Compensation
The expected salary/wage range for this position is provided below. Actual offer may vary from this range based upon geographic location, work experience, education/training, and/or skill level. – United States of America: Annual Salary USD 160,000 - 325,000 in California // 141,000 - 325,000 in District of Columbia & Maryland & North Carolina & Texas & Virginia & Washington
Responsibilities
Plan and execute full-scope adversary emulation campaigns
Partner with detection teams to validate controls and improve defenses
Conduct offensive security research and develop custom tooling
Automate testing and develop internal Red Team tools
Provide technical planning and delivery of Red Team and Purple Team engagements
Requirements
Master’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent
Lead advanced offensive cybersecurity engagements as a Senior Principal Red Team Engineer, planning, executing, and reporting on complex Red Team and Purple Team operations.
Compensation
The expected salary/wage range for this position is provided below. Actual offer may vary from this range based upon geographic location, work experience, education/training, and/or skill level. – United States of America: Annual Salary USD 160,000 - 325,000 in California // 141,000 - 325,000 in District of Columbia & Maryland & North Carolina & Texas & Virginia & Washington
Responsibilities
Plan and execute full-scope adversary emulation campaigns
Conduct multi-stage operations across enterprise environments
Apply disciplined operational tradecraft to achieve objectives
Partner with detection and defensive teams to validate controls
Translate offensive activity into measurable defensive improvements
Requirements
Master’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent
Nice to have: Credited CVEs
Nice to have: Bug bounty participation
Nice to have: Security blogging
Nice to have: Publicly available quality code or tools
Senior Principal Red Team Engineer responsible for planning and executing advanced offensive cybersecurity engagements, developing tools, and leading AI-driven red team operations.
Compensation
The expected salary/wage range for this position is provided below. Actual offer may vary from this range based upon geographic location, work experience, education/training, and/or skill level. – United States of America: Annual Salary USD 160,000 - 325,000 in California // 141,000 - 325,000 in District of Columbia & Maryland & North Carolina & Texas & Virginia & Washington
Responsibilities
Plan and execute full-scope adversary emulation campaigns
Partner with detection and defensive teams to validate controls
Continuously conduct offensive security research and custom tooling development
Build and operate AI harnesses for red team operations
Requirements
Master’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent
Nice to have: Credited CVEs
Nice to have: Bug bounty participation
Nice to have: Security blogging
Nice to have: Publicly available quality code or tools
Lead end-to-end red team operations and intelligence-led Purple Team exercises across cloud, CI/CD, endpoint, identity, application, and AI environments.
Responsibilities
Lead end-to-end red team operations and intelligence-led Purple Team exercises
Develop command-and-control tooling, implants, payload delivery mechanisms, and operator workflows
Red team AI systems including internal copilots, agentic workflows, and MLOps environments
Use AI tools to improve research, automation, payload development, reporting, and operational planning
Translate red team findings and threat intelligence into clear engineering actions
Lead and execute red team operations, develop offensive tooling, and provide threat intelligence to strengthen Grab's security posture across cloud, CI/CD, endpoint, identity, application, and AI environments.
Responsibilities
Lead end-to-end red team operations and intelligence-led Purple Team exercises
Develop command-and-control tooling, implants, payload delivery mechanisms, and operator workflows
Red team AI systems, including internal copilots, agentic workflows, AI-assisted operational tools, and MLOps environments
Use AI tools to improve research, automation, payload development, reporting, operational planning, and analysis of defensive coverage
Translate red team findings and threat intelligence into clear engineering actions
Lead AI-assisted vulnerability research, designing and building secure AI harnesses to discover, validate, and report high-impact software vulnerabilities.
Compensation
$172,100.00 - $278,300.00/yr
Responsibilities
Design, build, and improve AI/security harnesses for vulnerability research
Produce high-quality research artifacts and technical reports
Conduct deep technical analysis across real-world software and open-source projects
Build reusable research infrastructure and automation pipelines
Analyze large-scale harness outputs to identify new research opportunities
Requirements
Master's degree in Computer Science, Cybersecurity, or related field
Nice to have: PhD in Computer Science, Cybersecurity, AI/ML, Systems, Programming Languages
Nice to have: experience building AI agent harnesses
Nice to have: experience handling real vulnerabilities end-to-end
Nice to have: knowledge of Web Security, OS & Kernel Security, Browser Security, Software Supply Chain Security, OT/IoT Security, Network/Protocol Security, Cloud Security, Application Security
Senior security researcher focused on AI-assisted vulnerability research, building and improving AI/security harnesses for discovering, validating, and reporting high-impact vulnerabilities in real-world software and open-source projects.
Compensation
$147,600.00 - $238,700.00/yr
Responsibilities
Design, build, and improve AI/security harnesses for vulnerability research
Produce high-quality research and security artifacts
Conduct deep technical analysis across real-world software and open-source projects
Build reusable research infrastructure
Use LLMs, AI agents, fuzzing, static/dynamic analysis, program analysis, reverse engineering automation, and security automation to improve the quality, speed, coverage, and reliability of vulnerability research workflows
Requirements
Master's degree in Computer Science, Cybersecurity, or a related technical field
Nice to have: PhD in Computer Science, Cybersecurity, AI/ML, Systems, Programming Languages
Nice to have: experience building AI agent harnesses
Nice to have: experience handling real vulnerabilities end-to-end
Nice to have: knowledge of security in Web Security, OS & Kernel Security, Browser Security, Software Supply Chain Security, OT/IoT Security, Network/Protocol Security, Cloud Security, Application Security
Lead the technical strategy for offensive security across TP‑Link’s embedded product portfolio, conducting advanced penetration tests, vulnerability research, and tool development.
Compensation
Salary Range: $220,000-$230,000
Responsibilities
Define and execute enterprise technical strategy for penetration testing of embedded devices and IoT ecosystems
Lead complex, high‑risk penetration tests and architecture‑level security assessments
Conduct vulnerability research, develop proof‑of‑concept exploits, and analyze root causes
Establish threat‑modeling practices and advise on secure design decisions
Architect and develop custom security tools, fuzzing harnesses, and automated testing platforms
Requirements
Bachelor's degree in computer science, Computer Engineering, Electrical Engineering, Information Security, or related field
Senior Principal - Red Team EngineerNewHPE · Remote, US