{"id":18892,"url":"https://alion.io/job/censys-senior-security-researcher","title":"Senior Security Researcher","company":{"id":15491,"name":"Censys","domain":"censys.com","url":"https://alion.io/company/censys","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":81,"open_postings":4,"ghost_share":0,"stale_share":0.75,"repost_share":0,"time_to_fill_p50_days":27,"computed_at":"2026-10-20T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"inferred_payroll_markers","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":220000,"max":278000,"currency":"USD","period":"year","gross":null,"usd_annual":278000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Censys","optional":false},{"name":"LLM","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"ISO 27001","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-07-23T19:37:59Z","employer_posted_date":"2026-09-03","last_verified_at":"2026-10-20T11:15:23Z","board_verified":true,"closed_at":null,"days_open":88,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":88},"description":"Company Background\nCensys’ mission is to be the one place to understand everything on the internet. Frustrated by the lack of trustworthy Internet intelligence, we set out to create the industry’s most comprehensive, accurate, and up-to-date map of the Internet. Today, Censys delivers real-time Internet intelligence and actionable threat insights to global governments, over 50% of the Fortune 500, and leading threat intelligence providers worldwide.\nAs a Security Security Researcher, you’ll have the opportunity to work at the intersection of large-scale internet measurement, advanced threat research, and real-world cybersecurity events. Our research doesn't just advance academic knowledge-it’s leveraged to directly protect enterprise customers and support critical national security initiatives. You'll collaborate with world-class researchers, engineers, and product teams while having the freedom to pursue ambitious research projects that push the boundaries of what's possible in cybersecurity. With our strong partnerships across government and commercial sectors, your work will have immediate real-world application and visibility at the highest levels of the security community.\nWe're looking for a Security Researcher with deep, hands-on offensive security experience - penetration testing, red teaming, adversary emulation, CNO - to join our Research team, known as ARC. This is a role that generates original, attacker's-eye insight and turns it into both product capability and public research.You'll work at the intersection of three things: how real attackers operate, what that means for how Censys should scan, fingerprint, and characterize the Internet, and how to communicate that to both engineering teams and the broader security community.\nThis position is located remotely with no expectation to work from a Censys office. This position is also expected to travel once per quarter for industry events and team onsites. \nWhat you’ll do:\nDrive product capability. Bring an offensive practitioner's perspective to Censys's scanning, fingerprinting, and attack surface data. Identify gaps in detection logic, protocol coverage, and vulnerability signals that only someone who has actually broken into networks would notice.\nConduct original research. Investigate emerging attack techniques, exploitation trends, C2 infrastructure, and adversary tradecraft using Internet-wide scan data and your own testing methodology.\nPublish seminal work. Produce research reports, technical blog posts, and conference-caliber material (DEF CON, Black Hat, BSides, etc.) that establishes Censys as an authoritative voice in offensive security.\nCollaborate cross-functionally. Partner with Engineering and Product to translate research findings into new scanning modules, fingerprints, risk indicators, and detection features.\nLead agentic AI threat research. Build, deploy, and evaluate agentic AI frameworks - autonomous penetration testing agents, LLM-powered vulnerability research tools, multi-agent swarms - both as tradecraft research (i.e., “how do attackers use these tools”) and as Censys product capability (i.e., “how do we detect that adversaries are using them”). Where AI-assisted vulnerability discovery shows promise, determine what Censys’ scanning and fingerprinting posture should be for the signals those tools leave behind.\nTrack adversary infrastructure. Use red team and pentest tradecraft knowledge to identify how threat actors stand up, configure, and hide infrastructure - and encode that knowledge into repeatable detection logic.\nMentor and inform. Act as an internal subject-matter expert on offensive techniques, helping other researchers and engineers reason about attacker behavior.\nDemonstrates curiosity, a willingness to learn, and sound judgment in applying AI \nSkills and experience you’ll have: \n5+ years of hands-on penetration testing, red teaming, or adversary emulation experience against enterprise, cloud, or Internet-facing environments.\nDemonstrated ability to independently identify and characterize vulnerabilities, misconfigurations, or exploitation techniques.\nStrong understanding of network protocols, service fingerprinting, and Internet-scale scanning concepts (or a fast ability to pick them up).\nHands-on experience with agentic systems for offensive security. You have built, evaluated, or operated LLM-powered attack agents using autonomous pentest frameworks such as: HackSynth, RedTeamLLM, CAI, PentAG, and successors; AI-assisted vulnerability research pipelines, or multi-agent adversary emulation tooling. You also have demonstrated understanding of the failure modes of this agentic tooling\nProficiency in scripting or coding (Python, Go, or similar) to build tooling, automate testing, or analyze large datasets.\nFamiliarity with red team frameworks and tradecraft (C2 frameworks, initial access techniques, living-off-the-land methods, evasion).\nComfort working with large-scale Internet scan data or a strong interest in learning to do so.\nPreferred skills/experience:\nRelevant certifications (OSCP, OSCE, OSEP, GXPN, or equivalent demonstrated skill).\nExperience with IoT, OT/ICS, or embedded device security research.\nPrior work as a researcher at a security vendor.\nEvidence of research/tooling contributions to the agentic offensive space (e.g., benchmarks, PoCs, AI-assisted vulnerability discoveries) and demonstrated agentic AI red teaming work (e.g., Microsoft's PyRIT, the Cloud Security Alliance's Agentic AI Red Teaming Guide, or equivalent tooling and methodology)\nA track record of public research output - CVEs, conference talks, technical blog posts, or tool releases - that shows you can communicate findings clearly to a technical audience.\nFamiliarity with compliance-adjacent security testing (e.g., how pentest findings map to SOC 2, ISO 27001, or CMMC control requirements) is a plus, though not the core focus of this role.\nYou'll have access to a dataset that most researchers only dream about - a continuously updated map of the entire Internet's exposed attack surface - and the mandate to turn what you find into both product impact and public research that shapes how the industry thinks about offensive security.\nFor high cost of living areas in the US (San Francisco / Seattle / NYC), the expected salary range for this position is $220,000 USD - $278,000 USD, plus bonus eligibility and equity.\nFor all other locations in the US, the expected salary range for this position is $202,000 USD - $254,000 USD, plus bonus eligibility and equity. \nFor candidates being considered outside of the US, location specific market data will be evaluated and discussed during the interview process. \nJob level and actual compensation will be decided based on factors including, but not limited to, individual qualifications objectively assessed during the interview process (including skills and prior relevant experience, potential impact, and scope of role), market demands, and specific work location. The listed range is a guideline, and the range for this role may be modified. For roles that are available to be filled remotely, the pay range is localized according to employee work location by a factor of between 83% and 100% of range. Please discuss your specific work location with your recruiter for more information.\nFor US Employees: Censys offers a competitive benefits package to employees, including equity, health, dental & vision coverage, retirement with company contribution, parental leave, mental health & wellness benefits, flexible PTO, and a professional development stipend. Censys also offers sales incentive pay for most sales roles and an annual bonus plan for eligible non-sales roles. Please see our careers page for more details. For employees located outside of the US, location-specific benefits are available and will the information pertaining to those will be provided to you during the interview process.\nWe will work to ensure individuals with disabilities are provided reasonable accommodation to apply for a role, participate in the interview process, perform essential job functions, and receive other benefits and privileges of employment. If you require accommodation, please reach out to your recruiter. These modifications enable an individual with a disability to have an equal opportunity not only to get a job, but successfully perform their job tasks to the same extent as people without disabilities.\nTo ensure the integrity of our hiring process and in attempt to facilitate a more personal connection, we require all candidates to keep their cameras on during video interviews. You may also be required to meet a Censys employee at one point during your process. Additionally, if hired, you will be invited to visit Ann Arbor, Michigan for in-person onboarding.\nBy applying for this job, the candidate acknowledges and agrees that any personal data contained in their application or supporting materials will be processed in accordance with our Censys Privacy Policy.\nWe value diversity and are committed to creating an inclusive environment for all employees. Censys is an equal opportunity employer. \nNote to external recruiters/agencies: We are not currently engaging with third-party agencies for this role and will not accept unsolicited outreach. We kindly ask that you do not submit resumes or candidate profiles to our team.\nIdentity Verification \nAs part of our hiring process, all candidates who receive an offer of employment will be asked to complete an identity verification through CLEAR.\nCalifornia Privacy Rights Notice\nPursuant to the California Consumer Privacy Act (CCPA), we are providing you with notice that we collect personal information from job applicants for business purposes, including evaluating your candidacy for employment, conducting interviews, and, if applicable, completing the hiring process. The categories of information we may collect include identifiers (such as name and contact information), professional or employment-related information (such as work history, education, and references), and other information you provide in your application. We do not sell or share your personal information. For more information on how we use and protect your personal information, and your rights under the CCPA, please refer to our Privacy Policy.","description_format":"text","description_chars":10332,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Parental leave","Professional development"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Threat Intelligence","Information Security","Vulnerability Management"],"lifecycle":[{"event":"open","at":"2026-07-23T19:37:59Z"}],"visa":[],"liveness":{"score":12,"band":"cold","label":"Long shot","p_open":1,"p_active":0.421,"p_room":0.28,"age_days":88,"expected_fill_days":27,"reasons":["conf:3","win:tail","crowd:"],"computed_at":"2026-10-20T05:45:00Z"},"pay":{"stated_usd_annual":278000,"is_top_pay":true},"html_url":"https://alion.io/job/censys-senior-security-researcher","json_url":"https://alion.io/job/censys-senior-security-researcher.json","meta":{"generated_at":"2026-10-20T12:46:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14110,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":15491},"rest":"https://alion.io/mcp/rest/get_company?id=15491"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcensys-senior-security-researcher"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcensys-senior-security-researcher"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcensys-senior-security-researcher"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/censys-senior-security-researcher\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcensys-senior-security-researcher"}]}