Remote Security Researcher Jobs
Remote Security Researcher jobs are open across the U.S. at remote-first firms, distributed cybersecurity teams, and technology companies in sectors like cloud security, defense, and financial services. Employers hiring remotely right now include Sony Interactive Entertainment, ISACA, and CertiK. Find a role that fits below and apply directly.
Find JobsOverview
Showing 5 of 14+ Remote Security Researcher jobs
INTRODUCTION
As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.
ABOUT THE ROLE
Cloud is where the modern breach lives. Adversaries don't need malware to win there: a leaked long-lived key, an over-trusted role, a misconfigured federation, or a poisoned CI/CD pipeline is enough. And they're no longer working by hand. Threat actors are AI-force-multiplied. They stand up campaigns in hours, enumerate cloud environments at machine speed, and generate permutations on the fly. We need to find, detect, and fix cloud attack paths at the same scale and velocity.
We're building toward that with agentic systems across the full lifecycle: red (agentic red teaming that continuously discovers attack paths in cloud environments), blue (agentic detection and response for cloud), and green (automated remediation, preventive policy, and posture guardrails). We need a research leader who understands all three deeply and can make them work as one system.
This is the senior-most research role for cloud within the Detection Content organization in Threat Detection Platform. It sits within the Cloud Detection team and has high visibility, high impact, and broad mandate: set the research direction for all cloud content, lead the hardest projects personally, and produce original research that moves the product and the industry forward. You will lead through expertise, technical direction, and influence.
You'll have visibility across one of the largest cloud and identity telemetry footprints in the industry, front-line insight from our threat hunters and incident responders, and a platform that can turn a single research finding into protection for thousands of customers overnight.
WHAT YOU'LL DO:
-
Set research direction across all cloud content. Own the technical vision for cloud threat research spanning control plane, identity, workloads, and Kubernetes across AWS, Azure, and GCP. Decide where research investment goes, which threat scenarios matter most, and how findings translate into detections, posture checks, and remediation. Have a hand in every major cloud content initiative.
-
Lead offensive cloud and attack-path research. Discover novel attack techniques, privilege escalation paths, credential access methods, cross-account and cross-tenant abuse, and identity trust weaknesses before adversaries operationalize them. Model how real attackers chain misconfigurations, permissions, and exposures into breaches, and turn that model into coverage.
-
Shape agentic red teaming for Cloud. Provide the adversarial expertise behind our agentic red team capability. Define the attack techniques, tradecraft, and scenarios agents should execute, how attack paths should be generated and validated at scale, and how results should be scored. Make sure our agents think like the most sophisticated cloud attackers.
-
Guide agentic detection and response. Translate offensive research and threat intelligence into detection requirements. Advise on detection logic over cloud audit and control-plane telemetry, identity signals, and runtime events. Ensure detections are behavioral, high-fidelity, and resilient to the variation that AI-generated attacks introduce.
-
Investigate in-the-wild cloud threats. Partner with Counter Adversary Operations, Office of Adversary Strategy, Falcon Complete, and incident response to analyze real cloud intrusions, supply chain campaigns, and emerging tradecraft. Turn what adversaries are doing today into what our platform detects and prevents tomorrow.
-
Research the AI attack surface in the cloud. Investigate how AI services, model APIs, agent frameworks, and non-human identities change cloud risk, and how adversaries are using AI to accelerate attacks. Keep CrowdStrike ahead of the curve as AI adoption outpaces the security foundations beneath it.
-
Apply AI/LLM to research workflows. Use automation and large language models to accelerate attack-path discovery, threat intel triage, detection prototyping, and validation. Drive adoption of AI-assisted research practices across the cloud content teams.
-
Influence product and platform direction. Identify gaps in cloud telemetry, coverage, and platform capabilities that limit what we can detect and fix. Work with product management, cloud engineering, and platform teams to close them, and help define where the cloud product should go to build a durable competitive edge.
-
Be CrowdStrike's voice in cloud security research. Publish original research, speak at industry conferences, contribute to open-source and community efforts, and engage with cloud service providers to responsibly disclose issues and drive secure defaults. Raise the bar for the industry, not just our product.
-
Mentor and raise the bar. Coach researchers and detection engineers across cloud teams. Review research, detection logic, and remediation content. Set the standard for what rigorous cloud security research looks like.
WHAT YOU'LL NEED:
-
Strong detection engineering background. Have extensive experience writing production detection content across multiple platforms or data domains. Deep understanding of different telemetry sources, their limitations, and where coverage breaks down.
-
Cross-domain thinking. Demonstrated ability to reason about threats that span multiple surfaces, endpoint to cloud, identity to SaaS, network to runtime. Have designed or contributed to detections that correlate signals across boundaries.
-
Threat landscape fluency. Stay current on threat actors, campaigns, and TTPs. Able to translate threat intelligence into detection requirements and prioritization decisions.
-
Detection content lifecycle experience. Understand what happens when detection libraries scale, aging rules, FP drift, performance cost, deprecation decisions. Have operated in an environment where detection quality is measured and maintained over time.
-
Strong communication and influence. Able to work across multiple teams, drive alignment, and articulate detection strategy to both engineers and leadership. Able to drive outcomes through expertise and relationships.
-
Technical leadership. Have guided or mentored engineers on detection quality, reviewed detection content at scale, or set technical standards for a detection engineering function.
-
Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.
BONUS POINTS:
- Experience applying AI/LLM to detection or security operations workflows
- EDR or SIEM vendor-side product experience
- MITRE ATT&CK fluency across multiple platforms
- Published security research (blogs, conference talks, tools, CVEs)
- Malware analysis or reverse engineering background
- Experience quantifying detection efficacy (precision, recall, bypass resistance)
LOCATION
LI-AV1
LI-Remote
This role will require the candidate to periodically undergo and pass additional background and fingerprint check(s) consistent with government customer requirements.
BENEFITS OF WORKING AT CROWDSTRIKE:
- Market leader in compensation and equity awards
- Comprehensive physical and mental wellness programs
- Competitive vacation and holidays for recharge
- Paid parental and adoption leaves
- Professional development opportunities for all employees regardless of level or role
- Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
- Vibrant office culture with world class amenities
- Great Place to Work Certified™ across the globe
CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.
CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions—including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs—on valid job requirements.
If you need assistance accessing or reviewing this website, submitting an application, requesting an accommodation, or providing feedback on the job posting, please contact us at recruiting@crowdstrike.com.
Find out more about your rights as an applicant.
CrowdStrike participates in the E-Verify program.
Notice of E-Verify Participation
Right to Work
CrowdStrike, Inc. is committed to fair and equitable compensation practices. Placement within the pay range is dependent on a variety of factors including, but not limited to, relevant work experience, skills, certifications, job level, supervisory status, and location. The base salary range for this position for all U.S. candidates is $195,000 - $310,000 per year, with eligibility for bonuses, equity grants and a comprehensive benefits package that includes health insurance, 401k and paid time off. For detailed information about the U.S. benefits package, please click here.
INTRODUCTION
As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.
ABOUT THE ROLE
Cloud is where the modern breach lives. Adversaries don't need malware to win there: a leaked long-lived key, an over-trusted role, a misconfigured federation, or a poisoned CI/CD pipeline is enough. And they're no longer working by hand. Threat actors are AI-force-multiplied. They stand up campaigns in hours, enumerate cloud environments at machine speed, and generate permutations on the fly. We need to find, detect, and fix cloud attack paths at the same scale and velocity.
We're building toward that with agentic systems across the full lifecycle: red (agentic red teaming that continuously discovers attack paths in cloud environments), blue (agentic detection and response for cloud), and green (automated remediation, preventive policy, and posture guardrails). We need a research leader who understands all three deeply and can make them work as one system.
This is the senior-most research role for cloud within the Detection Content organization in Threat Detection Platform. It sits within the Cloud Detection team and has high visibility, high impact, and broad mandate: set the research direction for all cloud content, lead the hardest projects personally, and produce original research that moves the product and the industry forward. You will lead through expertise, technical direction, and influence.
You'll have visibility across one of the largest cloud and identity telemetry footprints in the industry, front-line insight from our threat hunters and incident responders, and a platform that can turn a single research finding into protection for thousands of customers overnight.
WHAT YOU'LL DO:
-
Set research direction across all cloud content. Own the technical vision for cloud threat research spanning control plane, identity, workloads, and Kubernetes across AWS, Azure, and GCP. Decide where research investment goes, which threat scenarios matter most, and how findings translate into detections, posture checks, and remediation. Have a hand in every major cloud content initiative.
-
Lead offensive cloud and attack-path research. Discover novel attack techniques, privilege escalation paths, credential access methods, cross-account and cross-tenant abuse, and identity trust weaknesses before adversaries operationalize them. Model how real attackers chain misconfigurations, permissions, and exposures into breaches, and turn that model into coverage.
-
Shape agentic red teaming for Cloud. Provide the adversarial expertise behind our agentic red team capability. Define the attack techniques, tradecraft, and scenarios agents should execute, how attack paths should be generated and validated at scale, and how results should be scored. Make sure our agents think like the most sophisticated cloud attackers.
-
Guide agentic detection and response. Translate offensive research and threat intelligence into detection requirements. Advise on detection logic over cloud audit and control-plane telemetry, identity signals, and runtime events. Ensure detections are behavioral, high-fidelity, and resilient to the variation that AI-generated attacks introduce.
-
Investigate in-the-wild cloud threats. Partner with Counter Adversary Operations, Office of Adversary Strategy, Falcon Complete, and incident response to analyze real cloud intrusions, supply chain campaigns, and emerging tradecraft. Turn what adversaries are doing today into what our platform detects and prevents tomorrow.
-
Research the AI attack surface in the cloud. Investigate how AI services, model APIs, agent frameworks, and non-human identities change cloud risk, and how adversaries are using AI to accelerate attacks. Keep CrowdStrike ahead of the curve as AI adoption outpaces the security foundations beneath it.
-
Apply AI/LLM to research workflows. Use automation and large language models to accelerate attack-path discovery, threat intel triage, detection prototyping, and validation. Drive adoption of AI-assisted research practices across the cloud content teams.
-
Influence product and platform direction. Identify gaps in cloud telemetry, coverage, and platform capabilities that limit what we can detect and fix. Work with product management, cloud engineering, and platform teams to close them, and help define where the cloud product should go to build a durable competitive edge.
-
Be CrowdStrike's voice in cloud security research. Publish original research, speak at industry conferences, contribute to open-source and community efforts, and engage with cloud service providers to responsibly disclose issues and drive secure defaults. Raise the bar for the industry, not just our product.
-
Mentor and raise the bar. Coach researchers and detection engineers across cloud teams. Review research, detection logic, and remediation content. Set the standard for what rigorous cloud security research looks like.
WHAT YOU'LL NEED:
-
Strong detection engineering background. Have extensive experience writing production detection content across multiple platforms or data domains. Deep understanding of different telemetry sources, their limitations, and where coverage breaks down.
-
Cross-domain thinking. Demonstrated ability to reason about threats that span multiple surfaces, endpoint to cloud, identity to SaaS, network to runtime. Have designed or contributed to detections that correlate signals across boundaries.
-
Threat landscape fluency. Stay current on threat actors, campaigns, and TTPs. Able to translate threat intelligence into detection requirements and prioritization decisions.
-
Detection content lifecycle experience. Understand what happens when detection libraries scale, aging rules, FP drift, performance cost, deprecation decisions. Have operated in an environment where detection quality is measured and maintained over time.
-
Strong communication and influence. Able to work across multiple teams, drive alignment, and articulate detection strategy to both engineers and leadership. Able to drive outcomes through expertise and relationships.
-
Technical leadership. Have guided or mentored engineers on detection quality, reviewed detection content at scale, or set technical standards for a detection engineering function.
-
Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.
BONUS POINTS:
- Experience applying AI/LLM to detection or security operations workflows
- EDR or SIEM vendor-side product experience
- MITRE ATT&CK fluency across multiple platforms
- Published security research (blogs, conference talks, tools, CVEs)
- Malware analysis or reverse engineering background
- Experience quantifying detection efficacy (precision, recall, bypass resistance)
LOCATION
LI-AV1
LI-Remote
This role will require the candidate to periodically undergo and pass additional background and fingerprint check(s) consistent with government customer requirements.
BENEFITS OF WORKING AT CROWDSTRIKE:
- Market leader in compensation and equity awards
- Comprehensive physical and mental wellness programs
- Competitive vacation and holidays for recharge
- Paid parental and adoption leaves
- Professional development opportunities for all employees regardless of level or role
- Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
- Vibrant office culture with world class amenities
- Great Place to Work Certified™ across the globe
CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.
CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions—including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs—on valid job requirements.
If you need assistance accessing or reviewing this website, submitting an application, requesting an accommodation, or providing feedback on the job posting, please contact us at recruiting@crowdstrike.com.
Find out more about your rights as an applicant.
CrowdStrike participates in the E-Verify program.
Notice of E-Verify Participation
Right to Work
CrowdStrike, Inc. is committed to fair and equitable compensation practices. Placement within the pay range is dependent on a variety of factors including, but not limited to, relevant work experience, skills, certifications, job level, supervisory status, and location. The base salary range for this position for all U.S. candidates is $195,000 - $310,000 per year, with eligibility for bonuses, equity grants and a comprehensive benefits package that includes health insurance, 401k and paid time off. For detailed information about the U.S. benefits package, please click here.
See All 14 Remote Security Researcher Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsRemote Security Researcher Job Market
Who's Hiring
Top Industries Hiring
- Technology & Software
- Non-Profit & Social Services
What Employers Look For
The qualifications that appear most often in remote security researcher jobs.
- Demonstrated experience identifying and exploiting vulnerabilities in software or systems
- Proficiency in at least one scripting or programming language such as Python or C
- Familiarity with reverse engineering tools such as IDA Pro, Ghidra, or Binary Ninja
- Bachelor's degree in computer science, cybersecurity, or a related technical field
- Knowledge of common attack frameworks and techniques such as MITRE ATT&CK
- Industry certifications such as OSCP, CEH, or GREM preferred or required
Tips for Your Remote Security Researcher Job Search
Apply early to remote roles that fit
Migrate Mate lists remote security researcher openings from across the U.S. in one place, so you can find roles that match your skills and apply directly without sifting through non-remote listings mixed in.
Build a public research portfolio
Remote employers can't observe your day-to-day work before hiring you, so they rely on what you've published. Documented CVEs, write-ups of CTF challenges, or a security research blog show independent thinking and technical depth in a way a resume alone cannot.
Show async communication skills in your application
Remote security researchers coordinate vulnerability findings, threat reports, and research updates entirely in writing. Use your cover letter and any take-home assessments to demonstrate that you write clearly, structure technical findings logically, and communicate risks without requiring a call.
Target companies with distributed security teams
Remote-first cybersecurity firms and cloud-native companies already have the infrastructure and culture to support independent remote research. Focus your search on organizations that openly describe distributed or fully remote security operations rather than those with hybrid setups that treat remote as an exception.
Remote Security Researcher Jobs: Frequently Asked Questions
How do I get a remote security researcher job?
Remote security researcher roles go to candidates who can demonstrate independent, self-directed work without close supervision. Remote employers screen for strong written communication, documented research output, and hands-on skills like vulnerability assessment, reverse engineering, or threat modeling. Publishing CVEs, contributing to open-source security projects, or maintaining a research blog gives you a concrete edge over candidates with equivalent credentials but no visible work.
Which companies hire remote security researchers?
Remote security researcher roles are posted by Sony Interactive Entertainment, ISACA, and CertiK and others right now, based on current remote listings on Migrate Mate as of November 2026. The companies hiring most actively tend to be remote-first cybersecurity firms, cloud providers, financial institutions, and defense contractors that run distributed security teams.
Can you get a remote security researcher job with no experience?
Yes, but remote entry-level security researcher roles are harder to land because employers expect you to work independently from day one with minimal oversight. Companies most likely to hire entry-level remote researchers include smaller cybersecurity startups and bug bounty platforms. Demonstrating documented research, public vulnerability disclosures, or capture-the-flag competition results can substitute for formal experience and open those doors.
Do you need a degree for remote security researcher jobs?
Not always. Many remote employers care more about demonstrated skills and research output than formal credentials, especially for technical roles focused on vulnerability research or penetration testing. That said, some employers in regulated sectors like defense or finance prefer candidates with a degree in computer science or a related field alongside certifications like OSCP, CEH, or CISSP.
Which industries hire the most remote security researchers?
Remote security researcher roles concentrate in Technology & Software and Non-Profit & Social Services, based on current remote listings on Migrate Mate as of November 2026. These sectors rely on distributed security teams to protect large attack surfaces across cloud infrastructure, financial systems, and digital products that require continuous research-driven defense.
See All 14 Remote Security Researcher Jobs
Find roles that match your experience and apply in just a few clicks.
Find Jobs