Senior Security Researcher
Vectra
150,000 - 230,000 / year
Need a reasonable accommodation to apply or interview? Contact us.
JobMinglr uses automated technology to recommend jobs based on profile information and job preferences. Match Score does not determine eligibility for a position, prevent a user from viewing or applying to a job, or make hiring decisions on behalf of an employer.
Description
Vectra® is the leader in AI-driven threat detection and response for hybrid and multi-cloud enterprises.
The Vectra AI Platform delivers integrated signal across public cloud, SaaS, identity, and data center networks in a single platform. Powered by patented Attack Signal Intelligence, it empowers security teams to rapidly prioritize, investigate and respond to the most advanced cyber-attacks. With 35 patents in AI-driven threat detection and the most vendor references in MITRE D3FEND, organizations worldwide rely on the Vectra AI to move at the speed and scale of hybrid attackers. For more information, visit www.vectra.ai.
*This is a hybrid role for San Jose, CA; Austin, TX; Boston, MA; or Dublin, Ireland
Position Overview
Vectra AI’s Security Research team studies how attackers operate and turns that knowledge into capabilities that help customers find and respond to threats. We are looking for a Senior Security Researcher to help define and investigate the security challenges created by enterprise AI adoption and AI-enabled attackers.
You will study how agents, copilots, AI-connected applications, and their identities can be misused or compromised. You will also examine how attackers use AI to accelerate familiar attack techniques. Your research will connect activity across identity, cloud, and network environments, with a focus on what customers can observe, investigate, and act on. This is an emerging area: you will help test assumptions, identify gaps in visibility, and shape the work that follows.
What You Will Do
- Develop threat models for enterprise AI systems and agent-mediated activity, including delegated access, service and workload identities, cloud agent infrastructure, connectors, and downstream actions.
- Investigate how AI changes attacker operations, including the speed, scale, sequencing, and coordination of reconnaissance, credential abuse, lateral movement, and data theft.
- Recreate realistic attack and misuse scenarios in controlled environments. Collect evidence, map the observable behavior across identity, cloud, and network, and distinguish confirmed signals from hypotheses.
- Assess existing detection coverage, identify telemetry and attribution gaps, and work with Data Science and Engineering to develop and validate new behavioral detections.
- Help connect an agent’s actions to the human, application, identity, workload, tool, and resource involved, even when a single log source shows only part of the chain.
- Translate research into clear findings, attack samples, coverage assessments, and recommendations that Product, Engineering, customer-facing teams, and customers can use.
- Stay close to emerging techniques and real incidents, contribute original research, and help Vectra decide which problems warrant further investment.
What Will You Need
- Approximately 5 or more years in security research, detection engineering, incident response, threat hunting, red teaming, or a related field, with evidence of independently led technical investigations.
- Strong understanding of attacker behavior and enterprise identity, including authentication, permissions, tokens, service principals, or workload identities.
- Hands-on experience investigating security activity in at least one major cloud platform and the ability to reason across cloud, identity, and network evidence.
- Ability to build repeatable labs or simulations, analyze logs and telemetry, and turn findings into detection requirements or coverage tests.
- Programming or scripting ability, such as Python, for research, data analysis, or test automation.
- Clear technical writing and the judgment to explain what the evidence shows, what remains uncertain, and why it matters to customers.
- Ability to work closely with researchers, data scientists, engineers, and product teams in a fast-changing problem space.
What Will Help You
- Research or operational experience with AI agents, copilots, model services, agent frameworks, tool integrations, or AI-related incidents.
- Familiarity with attacks involving delegated authority, OAuth applications, cloud control planes, prompt injection consequences, or compromised agent infrastructure.
- Experience correlating activity across multiple data sources or measuring detection efficacy against realistic attack sequences.
- Published research, open-source tools, conference talks, or other contributions to the security community.
Vectra provides a comprehensive total rewards package that supports the financial, physical, mental and overall health of our employees and their families. Compensation includes competitive base pay, incentive plan eligibility, and participation in the employee equity plan (stock options). Specific benefits offered varies by location, but commonly include health care insurance, income protection / life insurance, access to retirement savings plans, behavioral & emotional wellness services, generous time away from work, and a comprehensive employee recognition program.
Vectra is committed to creating a diverse environment and is proud to be an equal opportunity employer.
We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status.
Benefits
- stock options
- life insurance
About this role
Vectra's Security Research Team sits at the intersection of threat intelligence and product development, and this senior role offers hands-on involvement in both. You'd research network and cloud-based threats, work directly with data scientists to build detection capabilities, and validate those detections through attack simulation and gap analysis. The work spans systems analysis, APT modeling, protocol analysis, and malware investigation—with real influence over how Vectra's AI-driven platform evolves to catch advanced attackers.
The position calls for someone with at least five years in penetration testing, security research, malware analysis, or incident response. You'll need strong Python skills, deep familiarity with attacker tools and frameworks (Cobalt Strike, Metasploit, Mimikatz, and others), and solid grounding in network protocols and forensics. Experience with network traffic analysis tools like Wireshark, host forensics, and the ability to replicate sophisticated TTPs in controlled environments are essential. Beyond the core requirements, background in red teaming, incident response, or community participation in infosec strengthens your candidacy.
This is a remote-eligible hybrid role based in San Jose, Austin, Boston, or Dublin, with a salary range of $150,000–$230,000 plus equity participation. It suits researchers who want to move beyond one-off engagements into sustained, strategic work shaping detection technology while staying current on emerging threats.
Pay for this role
$150,000 to $230,000 per year
That is the employer's posted range, and where you land in it is usually decided in one conversation. Before that conversation, run the numbers: analyze an offer for this role.
Before you apply, worth reading
How JobMinglr reads this job
Every listing here is scored against your profile before you apply: skills overlap, experience level, location and work arrangement, each weighted and explained. You see the score and the reasons, not just a list. How the matching works.