A high-impact consulting role focused on both incident response and offensive security engagements, contributing to complex, high-stakes client matters.
Compensation
Minimum Pay: $80,500, Maximum Pay: $104,000
Responsibilities
Respond to complex cyber incidents, including ransomware, data breaches, malware infections, email compromises, and insider threats.
Conduct in-depth investigations on various platforms and devices to identify the extent of compromise and potential threat actors.
Rapidly assess incoming incidents, coordinating with internal teams and clients to implement containment strategies and mitigate potential damages.
Utilise security tools, software, and methodologies to gather and analyse digital evidence, reconstruct incident timelines, and produce detailed assessments.
Generate clear and concise reports documenting investigative findings, analysis results, and recommended remediation actions.
The role involves being instrumental in groundbreaking research into vulnerabilities and exposures, engineering cutting-edge exploits and robust vulnerability tests, and building and maintaining essential, high-impact tooling.
Compensation
$162,700.00 - $263,175.00/yr
Responsibilities
Develop and maintain a comprehensive, industry-leading repository of vulnerability content to enhance detection and mitigation strategies.
Shape and drive the tactical response to zero-day and critical vulnerabilities across all attack surfaces, ensuring rapid containment and mitigation.
Conduct research and testing, enhance automation processes, and ensure a smooth workflow for identifying, validating and mitigating security risks.
Analyze existing solutions, identify barriers to quality, recommend changes, then implement.
Take part in architecture strategy sessions; design solutions that accommodate the requirements of the various groups across Cortex.
Requirements
Nice to have: patch management
Nice to have: WSUS
Nice to have: SCCM
Nice to have: enterprise/cloud deployed embedded systems
Lead engineering and offensive security for SAP platforms across on‑premise, cloud, and SaaS environments, integrating AI-driven controls and incident response.
Responsibilities
Threat‑model platform changes, cloud services, and AI capabilities
Design and implement security controls for SAP S/4HANA, HANA, and BTP
Set and validate security standards for SAP cloud and SaaS services
Secure AI and agentic systems using frontier AI
Lead AI‑supported offensive testing across SAP environments
Requirements
Nice to have: incident response experience as a technical responder or lead
Nice to have: cloud and SaaS security architecture depth
Nice to have: experience across SAP's cloud and SaaS portfolio
Nice to have: AI security frameworks such as OWASP Top 10 for LLM and Agentic Applications
Drive the security of critical banking applications and platforms through hands-on offensive testing.
Compensation
competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity
Responsibilities
Plan, scope, and execute penetration testing engagements across a variety of environments, including web applications, APIs, cloud platforms, infrastructure, thick-client, and/or mobile applications.
Collect and validate pre-requisites for each engagement, ensuring all necessary access, documentation, and approvals are in place.
Perform manual and automated testing to identify vulnerabilities, misconfigurations, and security weaknesses, leveraging industry-standard tools and custom scripts.
Document and communicate findings through comprehensive reports that include technical details, risk assessments, and actionable remediation recommendations.
Conduct peer reviews of penetration test reports to ensure accuracy, consistency, and quality of deliverables.
Requirements
Nice to have: financial services sector knowledge
Nice to have: Windows
Nice to have: Unix-like systems
Nice to have: source code review
Nice to have: Python
Skills
Principal Security Researcher (Advanced Threat Prevention)
Lead technical research and development of threat detection capabilities for Palo Alto Networks’ Advanced Threat Prevention (ATP) program.
Compensation
$172,100.00 - $278,300.00/yr
Responsibilities
Shape ATP detection strategy by identifying important vulnerability, exploit, and attack technique areas
Drive innovative detection ideas from concept to production, delivering measurable improvements in coverage, quality, speed, or scalability
Improve rapid response capability for zero-days, high-impact CVEs, and emerging attack vectors
Raise the quality and consistency of IPS protections by defining detection approaches, validation expectations, and technical review standards
Expand the team’s ability to deliver protections at scale through practical automation, detection pipeline improvements, and AI-assisted research workflows
Requirements
BS/MS in Computer Science, Computer Engineering, Cybersecurity, or related field, or equivalent professional experience
Conducting comprehensive penetration tests and leading assumed-breach red team operations across cloud-native applications and large-scale infrastructure using AI-assisted testing frameworks.
Responsibilities
Conduct comprehensive penetration tests across cloud-native applications, large-scale infrastructure, and complex network architectures.
Execute multi-tenant isolation testing and segmentation validation.
Identify, exploit, and document vulnerabilities in cloud services, container orchestration platforms, and automated deployment pipelines.
Plan and lead assumed-breach, objective-based red team operations against systems to test the effectiveness of defensive controls.
Integrate AI-assisted testing frameworks and LLM-driven automation into penetration testing workflows.
The expected salary/wage range for this position is provided below. Actual offer may vary from this range based upon geographic location, work experience, education/training, and/or skill level. – United States of America: Annual Salary USD 183,000 - 365,000 in Colorado // 197,000 - 395,000 in Massachusetts // 197,000 - 420,000 in California // 173,000 - 420,000 in North Carolina & Texas The listed salary range reflects base salary. Variable incentives may also be offered.
Responsibilities
Own the reference architecture and engineering standards for production agentic AI systems.
Design reusable agent execution harnesses that separate AI reasoning and planning from deterministic execution.
Lead multi-agent workflows, state management, memory, tool calling, human-in-the-loop controls, and long-running processes.
Define model-agnostic interfaces supporting commercial, cloud-hosted, and open-weight models, including routing, fallback, and workload-based selection.
Architect retrieval, context, and memory services using technologies such as RAG, hybrid search, and vector databases.
Lead and mentor the Security Operations team, design and develop security software and platforms, and manage the Security Operations Center.
Compensation
We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus.
Responsibilities
Provide operational and engineering leadership
Implement and evolve Canonical’s Security Operations Center
Design and develop security software and platforms
Monitor for, identify, respond to, and remediate security incidents
The Vice President, Global Red Team & AI Security Operations leads enterprise-wide red team and AI adversarial testing programs to emulate real-world threat actors and strengthen organizational resilience.
Responsibilities
Contribute to global Red Team and AI Red Team strategy, execution model, and operating standards.
Lead advanced attack simulations across traditional, cloud, and AI‑enabled environments.
Ensure red team activities align with enterprise risk, regulatory expectations, and control-validation objectives.
Define multi-year technical capability roadmaps for red team operations, including cloud exploitation, identity attack paths, adversary simulation validation, AI security testing, and scalable tooling automation.
Lead and oversee complex red team engagements across network, endpoint, application, cloud, and physical attack surfaces.
Requirements
Bachelor’s degree in Computer Science or equivalent field
Lead penetration testing and red team operations across cloud, endpoint, application, and API environments, serving as the technical owner of the offensive testing program.
Compensation
The base pay for this position ranges from $200,000/year in our lowest geographic market up to $270,000/year plus bonus in our highest geographic market.
Responsibilities
Plan, scope, execute, and report on penetration tests across Azure, AWS, and GCP environments, endpoints, internal web and desktop applications, and APIs.
Partner with development teams to mature application security and SDLC practices.
Lead and perform quarterly red team and purple team operations to simulate real-world adversary tactics.
Manage the private bug bounty program, including strategy, scope, vulnerability triage, and severity validation.
Operate the enterprise continuous attack surface monitoring platform and triage external findings.
Senior Security Engineer, SAP Cybersecurity — EMEANewApple · Remote, Ireland
Senior Penetration TesterNewJPMC Candidate Experience page · Washington, US
Senior Security Operations EngineerCanonical - Jobs · Remote