Principal Product Researcher (Cybersecurity)

TL;DR

Principal Product Researcher (Cybersecurity): Defining and evolving endpoint security posture strategies with an accent on vulnerability intelligence and OS-level research. Focus on translating CVE analysis into scalable security capabilities and automating remediation workflows across millions of devices.

Location: Remote (Must be based in the United States)

What you will do

• Lead the research and definition of next-generation endpoint security capabilities.
• Combine vulnerability intelligence, OS-level research, and attack insights to evolve security posture strategies.
• Translate CVE analysis and reverse engineering findings into actionable product and engineering requirements.
• Design security posture baselines to reduce risk exposure across millions of endpoints.
• Develop automation opportunities for vulnerability management, patching, and remediation workflows.
• Collaborate cross-functionally with Security and Engineering teams to integrate research into production systems.

Requirements

• Extensive experience in endpoint security, vulnerability management, or security research in complex production environments.
• Strong background in OS-level security concepts and attack surface reduction techniques.
• Hands-on experience with vulnerability analysis, CVE research, and reverse engineering.
• Proven ability to design large-scale detection and remediation frameworks or scanning systems.
• Proficiency in C, C++, or Go for building security-focused tooling.
• Must be based in the United States.

Nice to have

• Experience leveraging AI or automation to enhance security research, detection, or remediation workflows.

Culture & Benefits

• 100% remote work environment.
• Competitive compensation including bonus and equity opportunities.
• Comprehensive medical, dental, and vision insurance.
• 401(k) with employer contribution.
• Annual professional development budget and home office setup reimbursement.
• Inclusive, mission-driven culture focused on cybersecurity impact.