Lead Vulnerability Research Engineer - Hybrid

Raymond James; Saint Petersburg (FL); Hybrid; USD 140,000 - 210,000; Full time

Job summary

Raymond James seeks a Lead Vulnerability Research Engineer to drive hands-on threat-informed vulnerability research and remediation at scale. The role partners across security, engineering, and risk teams to reduce enterprise exposure through validated findings, automation, and secure coding practices.

This hybrid position in St. Petersburg, FL requires experience with SAST/DAST/IAST, cloud security, and AI-assisted tooling to accelerate hypothesis generation, patch analysis, and measurement of

Qualifications

• Experience in vulnerability research and remediation across apps, APIs, and cloud environments.
• Hands-on security tooling (SAST/DAST/IAST) and automation development.
• Ability to translate findings into prioritized engineering actions.
• Experience with AI-assisted security workflows is a plus.

Responsibilities

• Lead threat-focused vulnerability research across enterprise environments.
• Analyze threat intel and advisories to identify credible vulnerabilities.
• Perform controlled research to validate conditions, exploitability and mitigations.
• Develop auto-detection content and maintain reproducible artifacts.
• Build automation ingesting data from scanners, inventories, and threat sources.
• Create threat-informed prioritization models considering asset criticality and exposure.
• Use AI-assisted research to summarize evidence and guide remediation guidance.
• Provide rapid analysis for high-risk vulnerabilities with executive-ready risk context.

Skills

Vulnerability research

Threat intelligence

Security automation

Python

CI/CD

AI-assisted security

Cloud security

Technical communication

Leadership

Education

High School (HS)

Tools

SAST

DAST

IAST

SCA

API testing

Container scanning

CI/CD tooling

Job description

Raymond James seeks a Lead Vulnerability Research Engineer to drive hands-on threat-informed vulnerability research and remediation at scale. The role partners across security, engineering, and risk teams to reduce enterprise exposure through validated findings, automation, and secure coding practices.

This hybrid position in St. Petersburg, FL requires experience with SAST/DAST/IAST, cloud security, and AI-assisted tooling to accelerate hypothesis generation, patch analysis, and measurement of