Lead AI-assisted vulnerability research, designing and improving AI/security harnesses for discovering, validating, and reporting high-impact vulnerabilities in real-world software and open-source projects.
Compensation
$172,100.00 - $278,300.00/yr
Responsibilities
Design, build, and improve AI/security harnesses for vulnerability research
Produce high-quality research and security artifacts
Conduct deep technical analysis across real-world software and open-source projects
Build reusable research infrastructure
Use LLMs, AI agents, fuzzing, static/dynamic analysis, program analysis, reverse engineering automation, and security automation to improve research workflows
As a Senior Security Researcher, you will be at the forefront of cyber defense, focusing on vulnerability research, reverse engineering, and exploit development.
Compensation
$139,600.00 - $225,775.00/yr
Responsibilities
Conduct advanced vulnerability research, reverse engineering, fuzzing, root-cause analysis, and exploit development across various platforms.
Leverage Large Language Models (LLMs) and advanced ML techniques to automate and scale bug hunting across diverse domains, including Web, OS & Kernel, Software Supply Chain, OT/IoT, and Browser Security.
Use AI agents to accelerate PoC generation, exploitability analysis, and finding validation, with an emphasis on reducing false positives.
Design and deploy AI-guided fuzzers, smart static/dynamic analysis tools, and autonomous agentic workflows specifically built for vulnerability research.
Develop and utilize agent harnesses for vulnerability discovery, PoC validation, patch validation, and defensive security research workflows.
Requirements
Bachelor's degree in Computer Science, Cybersecurity, or a related technical field
Provide technical leadership for vulnerability research, exploit analysis, exposure validation, and vulnerability signature development across the Qualys security platform.
Responsibilities
Lead vulnerability research initiatives across operating systems, databases, enterprise applications, cloud services, container platforms, and network devices.
Research newly disclosed, N-day, and actively exploited vulnerabilities.
Lead the development of exploit-based exposure validation techniques to confirm real-world exploitability of vulnerabilities.
Review technical designs, research methodologies, and code contributions to ensure quality and consistency.
Partner with Engineering and Product teams to influence roadmap decisions and security content strategy.
Requirements
Bachelor's degree in a relevant field (or equivalent experience)
Lead vulnerability research initiatives across operating systems, databases, enterprise applications, cloud services, container platforms, and network devices.
Research newly disclosed, N-day, and actively exploited vulnerabilities.
Lead the development of exploit-based exposure validation techniques to confirm real-world exploitability of vulnerabilities.
Review technical designs, research methodologies, and code contributions to ensure quality and consistency.
Partner with Engineering and Product teams to influence roadmap decisions and security content strategy.
Requirements
Bachelor's degree in a relevant field (or equivalent experience)
Lead the technical strategy for offensive security across TP‑Link’s embedded product portfolio, conducting advanced penetration tests, vulnerability research, and tool development.
Compensation
Salary Range: $220,000-$230,000
Responsibilities
Define and execute enterprise technical strategy for penetration testing of embedded devices and IoT ecosystems
Lead complex, high‑risk penetration tests and architecture‑level security assessments
Conduct vulnerability research, develop proof‑of‑concept exploits, and analyze root causes
Establish threat‑modeling practices and advise on secure design decisions
Architect and develop custom security tools, fuzzing harnesses, and automated testing platforms
Requirements
Bachelor's degree in computer science, Computer Engineering, Electrical Engineering, Information Security, or related field
Senior Security Researcher to join a specialized Red Team focusing on the complex boundary where hardware meets software. Hunting for vulnerabilities in microarchitecture, memory management, and execution pipelines of modern CPUs and GPUs, as well as low-level code.
Responsibilities
Hunt for vulnerabilities in the microarchitecture, memory management, and execution pipelines of modern CPUs and GPUs
Analyze low-level code which runs on CPUs and GPUs
Bridge the gap between hardware primitives and kernel-level exploits
Uncover side-channels or architectural logic flaws
Serve as a technical contributor to the reverse engineering of wireless and embedded systems, identifying vulnerabilities and assessing their security impact.
Develop proof-of-concept exploits for discovered vulnerabilities following DevOps best practices for keeping codebases organized and maintainable.
Analyze firmware, software protections, and wireless protocols to uncover security flaws.
Utilize and develop custom tools to analyze and manipulate software/firmware binaries.
Collaborate closely with CNO developers, vulnerability researchers, and hardware engineers in a fast-paced, small-team environment.
Design, develop, document, and test custom hardware- and software-based Computer Network Operations (CNO) capabilities and tools, with an emphasis on embedded and resource-constrained systems.
Compensation
The projected compensation range for this position is $165,900.00-$295,300.00.
Responsibilities
Design, develop, document, and test custom hardware- and software-based CNO capabilities and tools
Reverse engineer complex hardware, firmware, and software systems to understand functionality and identify vulnerabilities
Conduct in-depth vulnerability research and engineer operational exploits against diverse targets and architectures
Work directly with mission stakeholders to collaborate, design, and validate capabilities against operational requirements
Apply knowledge of core network and security concepts to guide capability architecture and deployment