Principal Security Researcher, Google (Remote - US)

Jobgether; United States; Remote; USD 210,000 - 240,000; Full time

Job summary

A cybersecurity firm is looking for a Principal Security Researcher to join their team in a fully remote setting. You will investigate and analyze threats to enhance the security of Google environments. Responsibilities include leading defensive strategies, reverse engineering security weaknesses, and collaborating with cross-functional teams. Ideal candidates should have deep technical expertise and proven experience in cybersecurity practices. Competitive salary and comprehensive benefits are offered.

Benefits

Competitive salary range of $210,000 to $240,000

Generous paid time off

12 weeks paid parental leave

Comprehensive medical, dental, and vision insurance

401(k) plan with employer contribution

Life and disability insurance

Stock options for full-time employees

$500 reimbursement for home office setup

Annual professional development allowance

$75 monthly digital reimbursement

Access to coaching and growth platforms

Inclusive culture valuing diversity

Qualifications

• Deep technical expertise and creativity required.
• Proven ability in investigating identity compromises and threat detection.
• Experience in documenting research findings through reports and advisories.

Responsibilities

• Lead development of layered defense strategies.
• Investigate identity compromises to inform threat detection.
• Collaborate with product and engineering teams to prioritize features.

Skills

Expert knowledge of Google logs and APIs

Proven experience bypassing Google security controls

Skilled at building weaponized exploit proofs-of-concept

Strong understanding of Google vulnerabilities

Ability to shift between red team and defender roles

Experience in multi-tenant environments

Knowledge of IT automation tools

Excellent organizational skills

Tools

Elastic

Kibana

Job description

This position is posted by Jobgether on behalf of Huntress. We are currently looking for a Principal Security Researcher, Google in the United States.

This role offers an exciting opportunity to join a highly skilled security team focused on protecting millions of endpoints worldwide by developing innovative defenses against evolving cyber threats. As a Principal Security Researcher, you will investigate attacker behaviors within Google environments, build weaponized proofs-of-concept, and help shape the security capabilities that safeguard thousands of businesses. The position requires deep technical expertise, creativity, and a collaborative spirit, all within a fully remote and mission-driven setting.

Accountabilities:

• Lead the development of layered defense strategies combining diverse data sources to enhance security products.
• Investigate identity compromises like account takeover and credential theft to inform threat detection and identity protection features.
• Hunt threat actors in Google environments, analyzing attacker methods for initial access and persistence.
• Test attack paths and develop exploit proofs-of-concept to improve product defenses.
• Identify and validate telemetry signals confirming malicious activity with high confidence.
• Reverse engineer technology to find security weaknesses and undocumented features.
• Document research findings through technical reports, advisories, and blogs.
• Collaborate closely with product, engineering, and security teams to prioritize impactful features and product launches.
• Promote security awareness through media, public speaking, and educational initiatives.

• Expert knowledge of Google logs, APIs, and the ability to access and test Google data beyond native tools.
• Proven experience bypassing Google security controls, including MFA, and executing account takeovers.
• Skilled at building reliable weaponized exploit proofs-of-concept for identified vulnerabilities.
• Strong understanding of Google vulnerabilities and threats with hands-on testing in custom labs.
• Ability to shift between red team, system admin, and defender roles with a builder mindset.
• Experience working in multi-tenant environments such as MSPs and Google Workspace business plans.
• Knowledge of IT automation tools like PSAs and RMMs is preferred.
• Experience with Elastic, Kibana, and security conference presentations or community education is a plus.
• Excellent organizational and communication skills with a passion for translating complex security concepts into accessible insights.

• Fully remote work environment since inception.
• Competitive salary range of $210,000 to $240,000 base, plus bonus and equity.
• Generous paid time off including vacation, sick leave, and paid holidays.
• 12 weeks paid parental leave.
• Comprehensive medical, dental, and vision insurance plans.
• 401(k) plan with 5% employer contribution regardless of employee input.
• Life and disability insurance coverage.
• Stock options for all full-time employees.
• $500 one-time reimbursement for home office setup or upgrades.
• Annual education and professional development allowance.
• $75 monthly digital reimbursement.
• Access to coaching and growth platform BetterUp.
• Inclusive culture valuing diversity, equity, and belonging.

Jobgether is a Talent Matching Platform that partners with companies worldwide to efficiently connect top talent with the right opportunities through AI-driven job matching.

When you apply, your profile goes through our AI-powered screening process designed to identify top talent efficiently and fairly.
Our AI evaluates your CV and LinkedIn profile thoroughly, analyzing your skills, experience, and achievements.
It compares your profile to the job’s core requirements and past success factors to determine your match score.
Based on this analysis, we automatically shortlist the 3 candidates with the highest match to the role.
When necessary, our human team may perform an additional manual review to ensure no strong profile is missed.

The process is transparent, skills-based, and free of bias — focusing solely on your fit for the role. Once the shortlist is completed, we share it directly with the company that owns the job opening. The final decision and next steps (such as interviews or additional assessments) are then made by their internal hiring team.

Thank you for your interest!

#LI-CL1