64 security researcher jobs at 40 companies in Massachusetts
3w
Save
Mark Applied
Hide
3w
Senior/Staff Security Researcher
Arizona or California or Colorado or Connecticut or District of Columbia or Florida or Georgia or Illinois or Maryland or Massachusetts or Michigan or Missouri or Nebraska or New Jersey or New York or North Carolina or Oregon or Tennessee or Texas or Virginia or Washington or Wisconsin
$190k-$319k/yrRemoteFull Time
Semgrep: Provides a code security platform for developers and security teams.
Deep application security and program-analysis knowledge, ability to write and audit code in multiple languages, experience with applied AI/LLMs, building detection and evaluation pipelines, and autonomous research-driven delivery.
Semgrep, LLM, RAG, pydantic-ai, MCP, Kubernetes, Argo, Temporal, SAST, AST, IR, Claude Code, Cursor, Windsurf
Arlington or Dayton or Woburn or Boston or Melbourne or Carlsbad or United States
$173k-$216k/yrOnsiteFull Time
Systems & Technology Research: Develops advanced technology for national security and defense applications.
3+ YOEActive security clearance (US citizenship required), PhD/MS/BS in a technical discipline, 3+ years' relevant experience, strong MATLAB/Python/Simulink/C/C++ skills, expertise in signal processing, ML, radar, and systems integration.
Fulton or Ann Arbor or Atlanta or Austin or Boston or Cary or San Jose
$136k-$195k/yrOnsiteFull Time
CiscoNASDAQ: CSCO: Develops and sells networking hardware and cybersecurity software.
BS degree, experience in threat or malware research and analysis, scripting with Python, familiarity with Windows/Linux/macOS telemetry, strong communication and critical thinking.
Space Systems Researcher / Engineer - Analysis and Test Group (Associate Staff) (Lexington, MA, US)
Lexington, Massachusetts, United States
$116k-$182k/yrOnsiteFull Time
MIT Lincoln Laboratory: Building advanced technology prototypes for national security.
5+ YOEMS in a STEM field or Bachelor’s with 5+ years relevant experience; experience in physics/engineering modeling, simulation, or analysis; clear technical communication; onsite work in Lexington, MA; pass background check and obtain security clearance.
Werfen: Develops specialized diagnostic systems and reagents for clinical laboratories.
10+ YOE4+ Mgmt10+ years cybersecurity experience with 4+ years technical leadership; Bachelor's in CS/Computer Engineering/Business or equivalent; cybersecurity certifications preferred; knowledge of secure SDLC, privacy/regulatory standards, and product lifecycle.
Alloy Therapeutics: Providing drug discovery technologies and services to scientific partners.
Build and run an information security program including incident response, vulnerability and patch management, IAM and endpoint hardening, data protection for large-scale research, compliance (SOC 2/ISO), and governance.
Google Workspace, AWS, GCP, Azure, IAM, MFA, FIDO2, YubiKey, SSO, SCIM, EDR, CVE, CSIRT, SOC 2 Type 2, ISO 27001
Boston or Austin or Washington or Seattle or San Francisco
$120k-$155k/yrRemoteFull Time
HackerOne: Connecting organizations with ethical hackers to find security vulnerabilities.
3+ YOE3+ years security testing/vulnerability research on web/mobile apps, strong OWASP Top 10 knowledge, experience with Burp Suite and CVSS, ability to reproduce/validate findings and communicate technical impact in English.
Burp Suite, Common Vulnerability Scoring System (CVSS)
Riverside Research: Conducts independent scientific research for US national security.
3+ YOEThesis-based M.S. with 3+ years or Ph.D. in CS/CE/EE/cybersecurity or equivalent research experience; strong systems programming (C/C++, Rust, Python, Assembly); systems research experience; eligibility for Top Secret clearance.
Senior Manager - Blockchain Security & Digital Asset Infrastructure
New York or Charlotte or Chicago or St. Louis or Boston
$150k-$344k/yrHybridFull Time
EY: Global firm providing audit, tax, and professional consulting services.
8+ YOEBachelor's in a technical field and 8+ years in cybersecurity, systems engineering, blockchain security or cryptographic research; hands-on custody and key-management experience; expertise in blockchain protocols, cryptography, incident response, and AI-enabled threat analysis.
Open Source Research Resident, Emerging Technology & Security
Washington or Pittsburgh or Santa Monica or Boston or United States
$90k-$274k/yrHybridFull Time
RAND: Provides research and analysis for public policy and security.
5+ YOEConduct open-source investigations on AI, biosecurity, and national security; produce decision-ready assessments; strong analytic tradecraft and source judgment required.
Brown Brothers Harriman: Providing global investment management, custody, and private banking services.
Obtain and maintain accurate security reference data, perform security master set-ups and quality control, research vendor data, and liaise with internal stakeholders.
Principal, Research Security & Conflict of Interest Management
Cambridge, Massachusetts, United States
$131k-$183k/yrHybridFull Time
Broad Institute: Conducts genomic research to understand and treat human diseases.
5+ YOE5+ MgmtAdvanced expertise in COI, research security, and export control; 5+ years related experience; leadership/mentorship experience; strong regulatory interpretation, communication, and stakeholder engagement skills.
United States or Boston or Raleigh or New York City or Lisbon or Singapore or Argentina
$160k-$200k/yrRemoteFull Time
Bitsight: Provides cybersecurity ratings and digital risk management software solutions.
Technical leader in networking and information security with research and team leadership experience; proficiency in scripting, statistical experiments, prototyping, and strong communication and analytical skills.
United States or Arizona or California or Colorado or Connecticut or District of Columbia or Florida or Georgia or Illinois or Indiana or Kansas or Massachusetts or Maryland or Maine or Michigan or Minnesota or Missouri or Mississippi or North Carolina or New Hampshire or New Jersey or New York or Ohio or Oregon or Pennsylvania or Rhode Island or South Carolina or Tennessee or Texas or Utah or Virginia or Vermont or Washington or Wisconsin
$115k-$150k/yrRemoteFull Time
IDC: Provides market research and advisory services for technology industries.
2+ YOEBachelor's degree required, 2+ years research/analysis/product/consulting/journalism experience in software or cybersecurity, strong writing and presentation skills, advanced Microsoft Excel, familiarity with DevSecOps and AI application security.
Microsoft Excel, Microsoft Word, Microsoft PowerPoint
Alabama or Arizona or California or Colorado or District of Columbia or Florida or Georgia or Hawaii or Illinois or Indiana or Kansas or Massachusetts or Maryland or Michigan or Minnesota or Missouri or Montana or North Carolina or New Jersey or New Mexico or Nevada or New York or Ohio or Oklahoma or Oregon or Rhode Island or Tennessee or Texas or Utah or Virginia or Washington or Wisconsin or West Virginia or United Kingdom
$120k-$170k/yrRemoteFull Time
Slingshot Aerospace: Software and data analytics for space operations management.
2+ YOEActive U.S. security clearance (Secret minimum), Masters (or PhD) in related field, 2+ years' relevant experience (or PhD research), AI/ML expertise, software development skills, strong communication, ability to work with multidisciplinary teams.
Code Metal: Verifiable AI-powered code translation for mission-critical industries.
3+ YOEBachelor's or Master's in a technical field (or equivalent), 3+ years building AI/ML or applied research systems, strong Python and PyTorch skills, experience with LLM tooling, fine-tuning, retrieval, agentic systems, and experiment design; eligible to obtain U.S. security clearance.
Cambridge or New York City or Washington or Atlanta or San Francisco
$119k-$193k/yrOnsiteFull Time
ForresterNASDAQ: FORR: Provides market research and business advisory services to global leaders.
5+ YOERequires 5+ years of security and risk experience, BA/BS or equivalent, strong research, critical thinking, writing, presentation, and business skills; must be a US citizen and travel 30%-50%.
Managed Detection and Response (MDR), Managed Security Services (MSS), Zero Trust