Senior Principal Red Team Engineer responsible for planning and executing advanced offensive cybersecurity engagements, developing tools, and leading AI-driven red team operations.
Compensation
The expected salary/wage range for this position is provided below. Actual offer may vary from this range based upon geographic location, work experience, education/training, and/or skill level. – United States of America: Annual Salary USD 160,000 - 325,000 in California // 141,000 - 325,000 in District of Columbia & Maryland & North Carolina & Texas & Virginia & Washington
Responsibilities
Plan and execute full-scope adversary emulation campaigns
Partner with detection and defensive teams to validate controls
Continuously conduct offensive security research and custom tooling development
Build and operate AI harnesses for cybersecurity operations
Requirements
Master’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent
Lead advanced offensive cybersecurity engagements as a Red Team Engineer, planning and executing complex adversary emulation campaigns, developing tools, and integrating AI to enhance security operations.
Compensation
The expected salary/wage range for this position is provided below. Actual offer may vary from this range based upon geographic location, work experience, education/training, and/or skill level. – United States of America: Annual Salary USD 160,000 - 325,000 in California // 141,000 - 325,000 in District of Columbia & Maryland & North Carolina & Texas & Virginia & Washington
Responsibilities
Plan and execute full-scope adversary emulation campaigns
Partner with detection teams to validate controls and improve defenses
Conduct offensive security research and develop custom tooling
Build and operate AI harnesses for automated recon and attack simulations
Requirements
Master’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent
Lead end-to-end red team operations and intelligence-led Purple Team exercises across cloud, CI/CD, endpoint, identity, application, and AI environments.
Responsibilities
Lead end-to-end red team operations and intelligence-led Purple Team exercises
Develop command-and-control tooling, implants, payload delivery mechanisms, and operator workflows
Red team AI systems including internal copilots, agentic workflows, and MLOps environments
Use AI tools to improve research, automation, payload development, reporting, and operational planning
Translate red team findings and threat intelligence into clear engineering actions
Lead and execute red team operations, develop offensive tooling, and provide threat intelligence to strengthen Grab's security posture across cloud, CI/CD, endpoint, identity, application, and AI environments.
Responsibilities
Lead end-to-end red team operations and intelligence-led Purple Team exercises
Develop command-and-control tooling, implants, payload delivery mechanisms, and operator workflows
Red team AI systems, including internal copilots, agentic workflows, AI-assisted operational tools, and MLOps environments
Use AI tools to improve research, automation, payload development, reporting, operational planning, and analysis of defensive coverage
Translate red team findings and threat intelligence into clear engineering actions
Lead AI‑assisted vulnerability research, designing and building AI/security harnesses to discover, validate, and report high‑impact vulnerabilities in real‑world software and open‑source projects.
Compensation
$172,100.00 - $278,300.00/yr
Responsibilities
Design, build, and improve AI/security harnesses for vulnerability research
Produce high‑quality research artifacts and technical reports
Conduct deep technical analysis across real‑world software and open‑source projects
Build reusable research infrastructure and automation pipelines
Analyze large‑scale harness outputs to identify new research opportunities
Requirements
Master's degree in Computer Science, Cybersecurity, or a related technical field
Nice to have: PhD in Computer Science, Cybersecurity, AI/ML, Systems, Programming Languages
As a Senior Security Researcher, you will be at the forefront of cyber defense, focusing on vulnerability research, reverse engineering, and exploit development. You will leverage cutting-edge AI models to create agentic defenders and autonomous systems for vulnerability discovery, validation, and remediation.
Compensation
$147,600.00 - $238,700.00/yr
Responsibilities
Conduct advanced vulnerability research, reverse engineering, fuzzing, root-cause analysis, and exploit development across various platforms.
Leverage Large Language Models (LLMs) and advanced ML techniques to automate and scale bug hunting across diverse domains, including Web, OS & Kernel, Software Supply Chain, OT/IoT, and Browser Security.
Use AI agents to accelerate PoC generation, exploitability analysis, and finding validation, with an emphasis on reducing false positives.
Design and deploy AI-guided fuzzers, smart static/dynamic analysis tools, and autonomous agentic workflows specifically built for vulnerability research.
Develop and utilize agent harnesses for vulnerability discovery, PoC generation.
Requirements
Bachelor's degree in Computer Science, Cybersecurity, or equivalent field
Provide technical leadership for vulnerability research, exploit analysis, exposure validation, and vulnerability signature development across the Qualys security platform.
Responsibilities
Lead vulnerability research initiatives across operating systems, databases, enterprise applications, cloud services, container platforms, and network devices.
Research newly disclosed, N-day, and actively exploited vulnerabilities.
Lead the development of exploit-based exposure validation techniques to confirm real-world exploitability of vulnerabilities.
Review technical designs, research methodologies, and code contributions to ensure quality and consistency.
Partner with Engineering and Product teams to influence roadmap decisions and security content strategy.
Requirements
Bachelor's degree in a relevant field (or equivalent experience)
Lead vulnerability research initiatives across operating systems, databases, enterprise applications, cloud services, container platforms, and network devices.
Research newly disclosed, N-day, and actively exploited vulnerabilities.
Lead the development of exploit-based exposure validation techniques to confirm real-world exploitability of vulnerabilities.
Review technical designs, research methodologies, and code contributions to ensure quality and consistency.
Partner with Engineering and Product teams to influence roadmap decisions and security content strategy.
Requirements
Bachelor's degree in a relevant field (or equivalent experience)
Nice to have: Lua
Nice to have: Bash
Nice to have: Python
Nice to have: Cloud Platforms (AWS, Azure, Oracle, etc.)
A research-heavy role for a self-directed researcher-builder focusing on the design, implementation, and improvement of AI/security harnesses for discovering, validating, and reporting high-impact vulnerabilities.
Compensation
$147,600.00 - $238,700.00/yr
Responsibilities
Design, build, and improve AI/security harnesses for vulnerability research, with emphasis on reproducibility, validation quality, exploitability clarity, false-positive reduction, and stable evidence generation.
Produce high-quality research and security artifacts, such as improved harness capabilities, validated findings, root-cause analyses, technical reports, benchmarks, internal research artifacts, open-source tools, responsible disclosures, publications, or CVEs where appropriate.
Conduct deep technical analysis across real-world software and open-source projects, including reverse engineering, fuzzing, root-cause analysis, exploitability assessment, patch analysis, and PoC validation.
Build reusable research infrastructure, including target setup automation, fuzzing harnesses, AI agent workflows, benchmark environments, validation oracles, triage pipelines, and maintainer-facing reporting workflows.
Use LLMs, AI agents, fuzzing, static/dynamic analysis, program analysis, reverse engineering automation, and security automation to improve the quality, speed, coverage, and reliability of vulnerability research workflows.