Security Research IC4 - The typical base pay range for this role across the U.S. is USD $119,800 - $234,700 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $160,200 - $261,000 per year.
Responsibilities
Identifies and conducts research into critical security areas of Microsoft, supported, and/or competitor products vulnerable to exploitation, current or potential future attacks, adversary tracking, and/or academic literature.
Researches, analyzes, and summarizes security threats and shares results across teams to incorporate into future research or as enhancements in alignment with security initiatives.
Partners cross-functionally to design solutions to prevent, detect, and/or disrupt attacks, including for integration in or addition to new/existing products or features.
Leverages artificial intelligence (AI) workflows to understand research operations and how customers use Microsoft products and identifies opportunities for solutions to deliver protection.
Creates security analysis plan that aligns product timelines, interdependencies, risks, and feature scopes.
Requirements
Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field
Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field
Provide technical leadership for vulnerability research, exploit analysis, exposure validation, and vulnerability signature development across the Qualys security platform.
Responsibilities
Lead vulnerability research initiatives across operating systems, databases, enterprise applications, cloud services, container platforms, and network devices
Research newly disclosed, N-day, and actively exploited vulnerabilities
Lead the development of exploit-based exposure validation techniques to confirm real-world exploitability of vulnerabilities
Review technical designs, research methodologies, and code contributions to ensure quality and consistency
Partner with Engineering and Product teams to influence roadmap decisions and security content strategy
Lead research and development of cyber security tools and techniques, reverse engineering and exploiting software and hardware systems for U.S. government operations.
Compensation
Associate Staff Hiring Range: $114,000 - $148,000
Responsibilities
Owns and executes discrete design and development tasks such as data analyses, programming, designs, tests, models, simulations, or integration tasks within broader project or program efforts.
Applies relevant technical knowledge to solve less-defined and moderately complex problems, independently identifying appropriate methods and adapts existing approaches as needed.
May contribute to system, subsystem, or component-level development activities that may span multiple disciplines, mission needs, products, or technical focus areas.
Develops, reviews, and contributes to technical documentation, program reporting, data analyses, design materials, and presentations based on ambiguous policies and procedures.
Collaborates with project team members to ensure milestones, assumptions, dependencies, and technical risks are understood and addressed.
Requirements
Bachelor’s degree in a STEM discipline or other relevant technical field
Master’s degree in a STEM discipline
Nice to have: Version control systems (Git)
Nice to have: Disassemblers/decompilers (Ghidra, IDA Pro)
Conduct research and develop cyber security tools and techniques, reverse engineering and exploiting software and hardware systems for U.S. government operations.
Owns and executes discrete design and development tasks such as data analyses, programming, designs, tests, models, simulations, or integration tasks within broader project or program efforts.
Applies relevant technical knowledge to solve less-defined and moderately complex problems, independently identifying appropriate methods and adapts existing approaches as needed.
May contribute to system, subsystem, or component-level development activities that may span multiple disciplines, mission needs, products, or technical focus areas.
Develops, reviews, and contributes to technical documentation, program reporting, data analyses, design materials, and presentations based on ambiguous policies and procedures.
Collaborates with project team members to ensure milestones, assumptions, dependencies, and technical risks are understood and addressed.
Requirements
Bachelor’s degree in a STEM discipline or other relevant technical field
Master’s degree in a STEM discipline
Nice to have: embedded systems firmware reverse engineering
Nice to have: mobile applications reverse engineering
Lead research on AI, cybersecurity, and systems security, developing prototypes, experiments, and systems that influence Horizon3’s technology.
Compensation
Base salary range: $174,191 - $249,230 annually. The exact salary will be determined based on the selected candidate’s location, qualifications, experience, and relevant skills. Additional compensation: All full-time roles are eligible for an equity package in the form of stock options.
Responsibilities
Identify, formulate, and drive research problems at the intersection of AI, cybersecurity, and computer systems.
Translate real technical challenges from Horizon3's products, security environments, and research agenda into well-defined research questions.
Independently develop research directions, technical hypotheses, and experimental plans.
Design and lead rigorous experiments in controlled and representative environments.
Build research prototypes and technical systems, or provide sufficient technical direction for others to implement and evaluate them.
Requirements
Bachelor's in Computer Science or equivalent technical experience
Apply state-of-the-art approaches to understanding systemic vulnerabilities in software systems and how attackers adapt their tradecraft to exploit those vulnerabilities
Evaluate the effectiveness of tools, techniques, and processes developed by industry and the security research community
Develop models, tools, and data sets that can be used to characterize the threats to—and vulnerabilities in—software systems, and publish those results
Develop machine learning-based prototypes, products, and tools to solve and automate solutions to AI-related security problems
Translate research concepts into practical, operational capabilities, with the ability to work independently and as part of a collaborative team
Requirements
BS in computer science, machine learning, cybersecurity, or related discipline
Mastercard Vocalink is looking for a driven and motivated Senior Security Operations Analyst with Incident Response capabilities, to contribute to securing critical payments infrastructure in the UK.
Responsibilities
Providing monitoring coverage, triage and investigation of escalated alerts (T3) from various sources.
Responding to cybersecurity incidents through critical thinking, defining, and applying playbook responses
Applying root cause analysis and lessons learned to improve security posture and processes
Working closely with security engineering, threat intelligence, insider threat and a managed SOC service, providing critical feedback to improve and automate monitoring and response
Strong collaboration with the team to develop knowledge base, playbook and use cases.
Senior Application Security ResearcherNewCommIT · Kazakhstan
Cyber Systems Exploitation ResearcherMIT Lincoln Laboratory · Lexington, US
Senior Research Staff, Adversarial IntelligenceHorizon3 · Remote, US
Principal Engineer, AI Security & Model InternalsOpera · Wrocław, Poland+1 more
Senior Corporate Security Operations AnalystMastercard · London, United Kingdom