Security Researcher Jobs
Security Researcher jobs are open across technology, financial services, defense, and healthcare, from entry-level analyst to principal and staff researcher, with specializations in vulnerability research, malware analysis, and threat intelligence. Find a role that fits from the openings below and apply directly.
Find Security Researcher JobsOverview
Showing 5 of 78+ Security Researcher jobs
Title: Product Security Research Engineer
Duration: Long term
Location: San Jose, CA (Remote) (ONLY W2)
Job Description:
About the Role
As a Senior Member of Technical Staff, you will focus on the proactive discovery and technical validation of complex attack paths within the Nutanix product ecosystem. This is a deeply technical, engineering-centric role designed for a practitioner who excels at deconstructing the logic of an exploit. Working closely with our Security Architects, you will move beyond identifying individual flaws to demonstrate how vulnerabilities can be linked to create significant exposure. Your mission is to provide the offensive insight needed to build stronger, preventative defense and to leverage AI-driven engineering to stay ahead of sophisticated threats.
About the Team
The Client PSIRT is a growing center of excellence dedicated to the security of our products and the trust of our customers. We focus on “doing the right thing” by our users, investing in proactive defense and technical excellence. Our team values collaborative engineering and the pursuit of operational integrity. As we scale to meet new challenges, we are looking for engineers who are passionate about understanding how systems fail and building the technical intelligence required to protect them.
Responsibilities
- Attack Path Discovery: Partner with Security Architects to identify and technically validate potential exploit sequences. You will engineer proofs-of-concept to demonstrate how individual vulnerabilities can be linked to create significant product exposure.
- Impact Analysis: Perform deep-dive technical research to determine the exact “blast radius” of a vulnerability. You will be responsible for identifying exactly which products and versions are impacted and what specific data or services are at risk.
- Proactive Defense: Translate offensive research into preventative measures, providing Engineering teams with the technical evidence and architectural guidance needed to implement robust, long-term mitigations.
- AI-Enhanced Security Engineering: Explore and implement AI-driven automation to enhance our discovery and analysis capabilities. You will use emerging technologies to scale the identification of complex vulnerability patterns across the Nutanix stack.
- Technical Advocacy: Serve as a senior technical subject matter expert during high-stakes triage, helping stakeholders understand the practical reality of threat through evidence-based technical analysis and exploit modeling.
Qualifications
What you’ll bring to the team:
- Technical Research Background: 6-9 years of experience in Product Security Engineering, Vulnerability Research, or Offensive Security, with a focus on deconstructing complex software systems.
- Architectural Mindset: A talent for “Attack Path Thinking”, you can look at a complex architecture and identify how a minor logic flaw could lead to a major compromise.
- Technical Depth: A strong understanding of software vulnerabilities (logic flaws, memory corruption, auth bypasses) and how they manifest in cloud-native and hybrid-cloud environments.
- AI/ML Curiosity: Experience or a strong interest in using AI-driven tools to scale security engineering and automate the discovery of sophisticated vulnerability patterns.
- Collaborative Inquiry: An ability to work as peer with Architects and Developers, using technical data and research to build consensus on remediation paths.
Bonus points if you have:
- Experience with reverse engineering or high-level exploit development in a research-focused environment.
- Familiarity with “Graph-based” security analysis (mapping relationships between assets, permissions, and vulnerabilities).
- Contributions to the security community, such as tool development, technical whitepapers, or responsibility disclosed CVEs.
- Experience in a distributed engineering environment where technical evidence is the primary driver of security prioritization.
Title: Product Security Research Engineer
Duration: Long term
Location: San Jose, CA (Remote) (ONLY W2)
Job Description:
About the Role
As a Senior Member of Technical Staff, you will focus on the proactive discovery and technical validation of complex attack paths within the Nutanix product ecosystem. This is a deeply technical, engineering-centric role designed for a practitioner who excels at deconstructing the logic of an exploit. Working closely with our Security Architects, you will move beyond identifying individual flaws to demonstrate how vulnerabilities can be linked to create significant exposure. Your mission is to provide the offensive insight needed to build stronger, preventative defense and to leverage AI-driven engineering to stay ahead of sophisticated threats.
About the Team
The Client PSIRT is a growing center of excellence dedicated to the security of our products and the trust of our customers. We focus on “doing the right thing” by our users, investing in proactive defense and technical excellence. Our team values collaborative engineering and the pursuit of operational integrity. As we scale to meet new challenges, we are looking for engineers who are passionate about understanding how systems fail and building the technical intelligence required to protect them.
Responsibilities
- Attack Path Discovery: Partner with Security Architects to identify and technically validate potential exploit sequences. You will engineer proofs-of-concept to demonstrate how individual vulnerabilities can be linked to create significant product exposure.
- Impact Analysis: Perform deep-dive technical research to determine the exact “blast radius” of a vulnerability. You will be responsible for identifying exactly which products and versions are impacted and what specific data or services are at risk.
- Proactive Defense: Translate offensive research into preventative measures, providing Engineering teams with the technical evidence and architectural guidance needed to implement robust, long-term mitigations.
- AI-Enhanced Security Engineering: Explore and implement AI-driven automation to enhance our discovery and analysis capabilities. You will use emerging technologies to scale the identification of complex vulnerability patterns across the Nutanix stack.
- Technical Advocacy: Serve as a senior technical subject matter expert during high-stakes triage, helping stakeholders understand the practical reality of threat through evidence-based technical analysis and exploit modeling.
Qualifications
What you’ll bring to the team:
- Technical Research Background: 6-9 years of experience in Product Security Engineering, Vulnerability Research, or Offensive Security, with a focus on deconstructing complex software systems.
- Architectural Mindset: A talent for “Attack Path Thinking”, you can look at a complex architecture and identify how a minor logic flaw could lead to a major compromise.
- Technical Depth: A strong understanding of software vulnerabilities (logic flaws, memory corruption, auth bypasses) and how they manifest in cloud-native and hybrid-cloud environments.
- AI/ML Curiosity: Experience or a strong interest in using AI-driven tools to scale security engineering and automate the discovery of sophisticated vulnerability patterns.
- Collaborative Inquiry: An ability to work as peer with Architects and Developers, using technical data and research to build consensus on remediation paths.
Bonus points if you have:
- Experience with reverse engineering or high-level exploit development in a research-focused environment.
- Familiarity with “Graph-based” security analysis (mapping relationships between assets, permissions, and vulnerabilities).
- Contributions to the security community, such as tool development, technical whitepapers, or responsibility disclosed CVEs.
- Experience in a distributed engineering environment where technical evidence is the primary driver of security prioritization.
See All 78+ Security Researcher Jobs
Jump back to the full list of openings and apply to any security researcher role that fits.
Find Security Researcher JobsSecurity Researcher Job Market
A snapshot from current openings nationwide, updated as new roles post.
Who's Hiring
- Palo Alto Networks10
- Cisco6
- Center for Strategic and International Studies4
- Anthropic3
- Leerink Partners LLC (Formerly Svb Securities Llc)3
Top Industries Hiring
- Technology & Software27
- Education11
- Electronics & Hardware11
- Agriculture & Farming8
- Science & Research7
What Employers Look For
The qualifications that appear most often in security researcher jobs.
- Demonstrated experience identifying and exploiting vulnerabilities in software or systems
- Proficiency in at least one scripting or programming language such as Python or C
- Familiarity with reverse engineering tools such as IDA Pro, Ghidra, or Binary Ninja
- Bachelor's degree in computer science, cybersecurity, or a related technical field
- Knowledge of common attack frameworks and techniques such as MITRE ATT&CK
- Industry certifications such as OSCP, CEH, or GREM preferred or required
Tips for Your Security Researcher Job Search
Lead your resume with CVEs and findings
Hiring managers for security researcher roles scan for concrete proof of work. List any CVEs you've been credited for, bug bounty payouts, or published advisories. Generic descriptions of security duties won't differentiate you the way verified discoveries do.
Build a public research portfolio before applying
Many security researcher roles ask for writing samples or prior research during the application itself. Post writeups of CTF challenges, reverse engineering walkthroughs, or vulnerability disclosures on a public blog or repository so you can link directly from your resume.
Apply early to roles that fit
Migrate Mate lists security researcher openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Target job postings by research discipline
Security researcher is a broad title. Filter openings by the keywords that match your discipline, whether that's fuzzing, red team research, cryptography, or firmware analysis, so you're not wasting time on roles built around a completely different skill set.
Prepare a technical deep-dive for interviews
Most security researcher interviews include a live technical session where you walk through a past finding or solve a challenge in real time. Pick one piece of research you know inside out and practice narrating your methodology, dead ends, and final conclusion out loud.
Negotiate based on clearance and publication rights
In security research, two overlooked negotiables are whether you retain the right to publish findings publicly and whether the role requires or sponsors a security clearance. Clarify both before accepting an offer, since they directly affect your career trajectory and outside research.
Security Researcher Jobs: Frequently Asked Questions
Which companies are hiring the most security researchers?
The companies hiring the most security researchers right now include Palo Alto Networks, Cisco, and Center for Strategic and International Studies, with the largest share of openings in California, New York, and North Carolina, based on current listings on Migrate Mate as of June 2026. Demand is concentrated in technology, defense contracting, and financial services.
How many security researcher jobs are remote?
About 28% of security researcher openings are fully remote or hybrid as of June 2026, though availability varies by specialization. Threat intelligence and malware analysis roles tend to be the most remote-friendly, while roles involving classified environments or hardware security typically require on-site presence.
How do you become a security researcher?
Start by building foundational skills in networking, operating systems, and at least one programming language. Participate in capture-the-flag competitions and bug bounty programs to develop hands-on experience finding real vulnerabilities. Document your findings publicly, pursue a relevant certification such as OSCP, and apply to entry-level roles or internships that involve security analysis or penetration testing.
Can you get hired as a security researcher with little or no experience?
Yes, entry-level security researcher roles exist, and employers place significant weight on demonstrated curiosity and self-directed work. A portfolio of CTF writeups, a credited bug bounty submission, or a published vulnerability analysis can outweigh a lack of formal employment history. Internships at security consultancies or in-house teams are a common entry point for candidates without full-time experience.
What does the security researcher interview process look like?
Most security researcher interviews involve a recruiter screen followed by a technical assessment, which may be a take-home challenge, a live reverse engineering exercise, or a walkthrough of past research. A final round typically includes a panel interview with senior researchers who probe your methodology and depth of knowledge. Some roles also require a background check or clearance eligibility review.
Where can I find and apply to security researcher jobs?
You can find and apply to security researcher jobs on Migrate Mate, which lists current openings from across the United States. Find roles that match your specialization and experience level, then apply directly to each listing from the page.
See All 78+ Security Researcher Jobs
Jump back to the full list of openings and apply to any security researcher role that fits.
Find Security Researcher Jobs