Lead Security Researcher Job at Rapid7 (Pune)

Senior Security Researcher

Endor Labs is building the Application Security platform for the software develo...

Location

United States

Salary:

Not provided

Endor Labs

Expiration Date

Until further notice

Requirements

5+ years of experience in security research, vulnerability discovery, and offensive security
deep expertise in reverse engineering, exploit development, and software vulnerability analysis
strong understanding of software supply chain security, including package management systems, CI/CD pipelines, and dependency analysis
experience discovering and responsibly disclosing zero-day vulnerabilities
proven track record of publishing high-quality research or presenting at top security conferences (e.g., Black Hat, DEF CON, RSAC, BSides)
proficiency in programming languages such as Python, Rust, or Go
strong analytical skills and the ability to conduct complex security research autonomously
excellent communication skills, both written and verbal, to convey technical concepts to diverse audiences.

Job Responsibility

Conduct offensive security research on software supply chain threats, identifying and analyzing zero-day vulnerabilities
develop and refine exploit techniques to understand modern attack vectors targeting software supply chain through malicious code, 3rd party libraries, and CI/CD systems
work closely with Product Management to translate research findings into innovative security capabilities within Endor Labs' products
publish research findings through technical blogs, white papers, and industry-leading security conferences
collaborate with security engineers and developers to prototype and implement detection and mitigation strategies for emerging threats
contribute to the security community by developing open-source tools, methodologies, or frameworks that enhance software supply chain security
stay ahead of the latest threats, attacker methodologies, and evolving security trends to continuously refine our research efforts.

What we offer

Work with a world-class team dedicated to pushing the boundaries of security research
directly influence the security of modern software supply chains
a culture that values innovation, collaboration, and continuous learning
competitive compensation, flexible work environment, and a generous benefits package
opportunity to present groundbreaking research and contribute to the global security community.

Fulltime

Senior Security Research Engineer

Senior Security Research Engineer position at HPE's Security Lab in Bristol, UK....

Location

United Kingdom , Bristol

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

PhD (or equivalent research experience)
8+ or more years of experience
Track record of innovation driven into products
Experience as a technical leader
Knowledge of system security techniques and principles
Good knowledge of computer architecture, operating systems, networking, application of AI to security or security of AI
Good implementation skills with experience in Python, Rust, C, Go
Good written and verbal communication skills
mastery in English
Comfortable presenting to executives, technologists and customers

Job Responsibility

Define research agenda and take lead on research projects
Lead design of systems and solutions with colleagues
Own implementation of significant components
Build robust product-ready prototypes to test and demonstrate ideas
Research and develop foundational security capabilities for HPE products and services
Collaborate with business units, supply chain, partners and open-source community

What we offer

Health & Wellbeing benefits
Personal & Professional Development programs
Unconditional Inclusion environment
Comprehensive suite of benefits supporting physical, financial and emotional wellbeing

Fulltime

Senior Security Research Engineer

We are seeking a senior technologist to join the Security Lab in HPE Labs. This ...

Location

United Kingdom , Bristol

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

PhD (or equivalent research experience) plus 10 or more years of experience
track record of innovation driven into products
experience as a technical leader
application of AI to security or security of AI
excellent knowledge of system security techniques and principles
strong implementation skills with experience in one or more of the following: Python, Rust, C, Go
excellent knowledge of computer architecture, operating systems and networking
excellent written and verbal communication skills
comfortable presenting to executives, technologists and customers
excellent analytical and problem-solving skills

Job Responsibility

Define a research agenda and take the lead on research projects
build advanced security capabilities for HPE products and customers
collaborate with business units, supply chain, partners, and the open-source community
build robust product-ready prototypes to test and demonstrate ideas
lead the design of systems and solutions
inspire and motivate others.

What we offer

Comprehensive suite of health & wellbeing benefits
personal & professional development programs
unconditional inclusion
flexibility to manage work and personal needs.

Fulltime

Senior Security Researcher - ITDR (Cortex)

We are looking for a Senior Security Researcher to join our Identity Threat Dete...

Location

Israel , Tel Aviv

Salary:

Not provided

Palo Alto Networks

Expiration Date

Until further notice

Requirements

At least 5 years’ experience with Active Directory security and identity related attacks
2+ years of experience with Entra ID (formerly Azure AD) or SAAS application - Advantage
In-depth knowledge of the inner-workings of operating systems
In-depth Knowledge of network protocols, including but not limited to Kerberos, RPC, SMB, HTTP, SMTP, DNS, DHCP, etc
In-depth knowledge of enterprise infrastructure, including Active Directory, FW, VPN, Security products, etc
At least 2 Years of experience coding Python - Advantage
Strong knowledge of SQL language - Advantage
Experience with red-teaming / pentest of Entra ID - Advantage
Experience with machine learning / data analysis / cloud infrastructure / security - Advantage
Ability to drive and own projects from start to finish

Job Responsibility

Research the evolving threat landscape and develop advanced detections to protect SAAS, Cloud, on-premises, and hybrid identities
Focus on identifying and mitigating identity-related threats across networks, endpoints, and cloud environments, using statistical classification methods to build effective detection models and protecting customers at scale
Collaborate with cross-functional teams, validate detection concepts on real-world data, and continuously enhance detection capabilities to stay ahead of emerging threats
Research innovative methods for detecting targeted attackers operating in endpoints, networks, cloud and SAAS environments
Simulate real-world attacks in lab environments and conduct a deep analysis of the behavior
Develop and refine statistics-based classification algorithms and techniques to create and improve detection models
Research specific scenarios to enhance our model's capabilities
Collaborate within a diverse research group, improving our research processes and leading us to be a better team creating a better product
Stay informed on the latest APTs, attacker methodologies, and TTPs to ensure our models stay ahead of emerging threats

Security Engineering Lead

Citi's Application, Platform and Engineering team is looking for a Security Engi...

Location

United Kingdom , London

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Bring your deep-dive application security engineering expertise from building production systems
thrive in a results-driven environment, where flexibility fuels impact
be a game-changer, ready to step beyond your designated role
love the synergy of pair programming
seize the opportunity to secure AI applications at scale
have a relentless passion to learn more about AI security, LLM attacks, and bringing your knowledge to shape Citi's secure AI future
proven track record of architecting and building secure, large-scale production applications and business-facing platforms from the ground up
hands-on experience finding and exploiting vulnerabilities, conducting red team exercises, and thinking like an attacker to strengthen defenses
experience building security tools and secure production systems with Go, Python, JavaScript
deep experience with HashiCorp Vault for enterprise-scale secrets management

Job Responsibility

Build secure AI products
conduct penetration testing and vulnerability research
design automated security solutions
identify and mitigate AI-specific vulnerabilities
lead security practices in development lifecycles
mentor engineers on secure coding practices.

What we offer

27 days annual leave plus bank holidays
discretional annual performance-related bonus
private medical care and life insurance
employee assistance program
pension plan
paid parental leave
special discounts for employees, family, and friends

Fulltime

Product Security Engineer- Threat Researcher

The Senior Security Engineer/Threat Researcher position will be part of Aruba Th...

Location

Puerto Rico , Aguadilla

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

B.S. or M.S. in software engineering, computer science, cybersecurity or a related field (or equivalent experience)
6+ years of professional experience in software engineering, vulnerability research, penetration testing, or a related security discipline
Programming experience in C and at least one additional language used for secure software development, such as Rust, Go, or Python
Hands-on experience with security testing tools and techniques, such as fuzzing, reverse engineering, and exploit development frameworks (e.g., Metasploit, Immunity Debugger, Ghidra, or IDA Pro)
Understanding of memory-unsafe vulnerabilities, including buffer overflows, use-after-free, integer overflows, and format string vulnerabilities, as well as mitigation techniques such as ASLR, DEP, and stack canaries
Strong knowledge of web application security, including OWASP Top 10 vulnerabilities such as XSS, SQL injection, XXE, CSRF and insecure deserialization
Familiarity with secure coding practices, threat modeling, and static and dynamic application security testing (SAST/DAST) tools
Knowledge of modern cryptographic algorithms and security protocols (e.g., TLS, IPsec, OAuth) and their implementation pitfalls
Demonstrated ability to analyze, exploit, and remediate security vulnerabilities in complex codebases
Strong written and verbal communication skills, with the ability to create detailed technical reports and convey complex concepts to both technical and non-technical stakeholders. English advanced

Job Responsibility

Conduct advanced security assessments of HPE Aruba networking products, including manual code reviews and penetration testing, to uncover vulnerabilities such as memory-unsafe errors, insecure deserialization, and authentication/authorization flaws
Develop proofs of concept (PoCs) to demonstrate the exploitability of identified vulnerabilities and provide actionable remediation guidance to engineering teams when requested
Develop and maintain custom tools to assist in vulnerability discovery, exploit development, and tracking and disclosure of vulnerabilities to the public
Assist in managing Aruba’s bug bounty program, collaborating with external researchers and product engineering teams to triage, reproduce, and remediate reported vulnerabilities
Assist in writing vulnerability disclosure bulletins and managing the process of releasing those bulletins to the public
Serve as a subject-matter expert on secure coding practices, particularly in memory-safe and memory-unsafe programming languages, and evangelize these practices across product engineering teams
Conduct original security research on non-Aruba products and technologies, including discovering new vulnerabilities, publishing papers, and presenting at leading security conferences
Positively represent Aruba in the global security community by fostering collaboration with security researchers while balancing the goals of researchers with the needs of our customers

What we offer

Health & Wellbeing
Personal & Professional Development
Unconditional Inclusion

Fulltime

Information Security Professional Lead Analyst

The Info Sec Prof Lead Analyst is an intermediate level position responsible for...

Location

Philippines , City of Taguig

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

At least 7+ years of strong data analysis and report development experience
7+ years of experience in information security or related technology experience required
At least 7+ years’ experience with Business Intelligence Reporting tools like Cognos, Tableau
At least 7+ years’ experience with Databases like Oracle, SQL Server, Microsoft Access
Strong Business Intelligence Developer Skills
Strong understanding of application development life cycle, CI/CD and DevOps concepts
Excellent Excel data analysis and Access database skills
Excellent SQL Skills
Experience with issue resolution - ability to research, identify and communicate solutions
Consistently demonstrates clear and concise written and verbal communication

Job Responsibility

Design and implement a solution for performance measurements on effectiveness of controls and overall vulnerability assessment program
Analyze trends on assets security health posture and report using visualization tools for program review with management and stakeholders
Analyze and report aggregated data from multiple data sources
Develop data visualization mock-ups for monitoring program data trends and communicate using analytical tools
Develop reports for tracking program effectiveness and update power point deck for weekly, monthly and quarterly updates
Develop, optimize and provide continuous support for reports and ad-hoc queries from end user
Create dashboards with parameters and interactive drill down functionality
Analyze trends on assets security health posture and report using visualization tools for program review with management and stakeholders
Excellent Analytical Ability - Understand the systems and data flow at a high level to evaluate if appropriate controls are in place for the standards
Provide timely, accurate, and actionable reporting on application vulnerability activity, trends, service levels, and areas of concern to senior management

Fulltime

Lead Systems and RF Research Scientist

The STR Sensors Division is at the forefront of developing advanced signal proce...

Location

United States , Woburn

Salary:

160000.00 - 220000.00 USD / Year

STR

Expiration Date

Until further notice

Requirements

Ability to obtain a security clearance, for which U.S. citizenship is required by U.S. Government
BS in Electrical Engineering, Applied Mathematics, Physics, or a related technical discipline
Demonstrated team leadership and mentoring
8+ years’ experience working with hardware system design
Expertise with RF components and subsystems, including T/R modules, rotary joints, pedestal, filters, radiating structures, isolators, amplifiers, ADC/DAC, etc.
Design experience in: RF systems, subsystem and/or component analysis (frequency planning, link budget analysis, transceiver architectures, cascade analysis)
Design experience in: Electromagnetics & RF/wave propagation
Skilled in RF component/subsystem/system test and measurement equipment and techniques (anechoic chambers, oscilloscopes, vector network analyzers, spectrum analyzers, signal generators)
Proficiency in MATLAB and/or Python and/or other higher-level languages
Strong Mathematical, troubleshooting, written, and verbal communication skills

Job Responsibility

Collaborate with the team to quantify goals, system performance objectives, performance metrics, dependencies, and risks to guide program execution
Lead and work with multi-disciplinary teams to architect, implement, and test RF hardware systems enabling novel sensing, electronic warfare, and signal processing systems
Perform trade studies and analyses of proposed hardware architectures. Systems predominantly field deployable prototypes with the objective of transitioning to low-volume product systems
Design, calibrate, and implement and perform bench-top unit tests. Document results including correlation with objective system performance
Work with signal processing team on innovative sensing system test concepts and execution methods. Develop supporting system analytical test tools/measures
Design, document, and implement over-the-air system demonstrations, identifying hardware readiness, test architecture, performance metrics, data management, operational procedures, and performance reports
Review system effectiveness and identify opportunities to advance and/or mature subsystems and system capabilities
Document system design and performance for customer review. Present results to customers
Support business development and proposal writing efforts for next-generation RF hardware system development opportunities

Fulltime

Lead Security Researcher

Rapid7

Location:
India , Pune

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:
March 21, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Lead Security Researcher

Senior Security Researcher

Senior Security Research Engineer

Senior Security Research Engineer

Senior Security Researcher - ITDR (Cortex)

Security Engineering Lead

Product Security Engineer- Threat Researcher

Information Security Professional Lead Analyst

Lead Systems and RF Research Scientist

Lead Security Researcher

Rapid7

Location:India , Pune

Category:IT - Software Development

Contract Type:Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:March 21, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Lead Security Researcher

Senior Security Researcher

Senior Security Research Engineer

Senior Security Research Engineer

Senior Security Researcher - ITDR (Cortex)

Security Engineering Lead

Product Security Engineer- Threat Researcher

Information Security Professional Lead Analyst

Lead Systems and RF Research Scientist

Location:
India , Pune

Category:
IT - Software Development

Contract Type:
Not provided

Job Posted:
March 21, 2026