Jobs in the United States

25+ jobs

Group jobs by employerEmail me new jobs Save this search

Added 4 mins ago
AA
Technical Analyst II / Job Req 1040478098
Allameda Alliance for Health
Alameda, CA
- $110,094.4 to $165,131.2 USD / year
Added 4 mins ago
Staff Engineer Systems - External Interface
Northrop Grumman
Redondo Beach, CA
Candidate must have an active SCI at time of application
Added 4 mins ago
Systems Engineer/Prin Systems Engineer - Integration & Test (AHT)
Northrop Grumman
Redondo Beach, CA
Candidate must have an active SCI at time of application and prior to start date
Added 4 mins ago
Systems Engineer/Principal Systems Engineer - External Interface (AHT)
Northrop Grumman
Redondo Beach, CA
Candidate must have an active SCI at time of application · Candidate must have an active SCI at time of application and prior to start date
Added 4 mins ago
Northrop Grumman (SkillBridge) - Principal Network Cloud Communications
Northrop Grumman
Redondo Beach, CA
At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our…
Added 4 mins ago
AE
Firmware Engineer II, C++
Advanced Energy
Redwood City, CA
- $90,000 to $150,000 USD / year
Firmware Engineer II, C+ ABOUT ADVANCED ENERGY
Added 4 mins ago
AE
Firmware Engineer I, C++
Advanced Energy
Redwood City, CA
- $90,000 to $150,000 USD / year
Firmware Engineer I, C+ ABOUT ADVANCED ENERGY
Added 4 mins ago
Specialist, Software Engineering 1
L3Harris
Carlsbad, CA
The Resilient Communications software engineering organization is seeking a Software Engineer focused on system software development for embedded devices and communication systems. This…
Added 4 mins ago
Specialist, Software Engineering 1 1
L3Harris
Carlsbad, CA
L3Harris seeks skilled Software Engineer to join our System Software group, where you will architect next-generation, mission-critical solutions. Our team is responsible for developing the…
Added 4 mins ago
Engineer IV
General Atomics
Poway, CA
Must possess the ability to understand new concepts quickly and apply them accurately throughout an evolving environment
Added 4 mins ago
Engineer I
General Atomics
Poway, CA
Must have good communication, computer, hands-on, documentation, presentation, and interpersonal skills
Added 4 mins ago
Mechanical Engineer
Eaton Corporation
Santa Ana, CA
Experience using Product Lifecycle Management (PLM) systems for BOM management, configuration control, and engineering change processes (ECR/ECO).
Added 4 mins ago
Software Development Engineer, Amazon MSK
Amazon
Santa Monica, CA
The ideal candidate has experience designing large-scale systems supporting millions of transactions per second, enjoys solving complex software problems, and possesses analytical, design…
Added 4 mins ago
A
Thermal Test Engineer
Actalent
Fremont, CA
- $45 to $59 USD / hour
As a Thermal Test Engineer, you will take a leading role in designing and executing comprehensive test plans that validate the performance of thermal systems including battery conditioning,…
Added 5 mins ago
Project Engineer
Aerotek
Menlo Park, CA
The Project Engineer plans, organizes, and manages all document control and distribution processes for the Planning, Design & Construction (PD&C) function, supporting construction projects…
Added 5 mins ago
Systems Engineer 4 - Senior Ground Systems Engineer (MILSATCOM)
Insight Global
El Segundo, CA
One of our Aerospace and Defense clients is seeking a Senior Ground Systems Engineer to support the development, integration, verification, and testing of next-generation satellite ground…
Added 5 mins ago
Data Engineer II, Ring/Blink Customer Service Engineering and Insights
Amazon
Hawthorne, CA
We are seeking a Data Engineer to join our Customer Service Engineering and Insights team at Ring & Blink. This role owns the data platform foundations that enable analytics, AI…
Added 5 mins ago
Embedded Software Engineer, RF Payloads (Starshield)
SpaceX
Hawthorne, CA
…observation, communications, and hosted payloads. As a RF software engineer on the Starshield team, you will be working on advanced development programs in support of US National Security.…
Added 5 mins ago
Commissioning Engineer - PRIME
Insight Global
Oakland, CA
…seeking experienced Electrical Commissioning / Protection & Control Engineers to support utility projects across PG&E territory. This role focuses heavily on testing, commissioning, and…
Added 5 mins ago
Software Development Engineer, Creator Marketplace
Amazon
Culver City, CA
As a Software Development Engineer, it’s up to you to research, define, design and refine the tech that keeps us one step ahead of listeners. Anticipate. Innovate. Bring challenging ideas…
Added 5 mins ago
Software Development Engineer I, Inference models optimization, AWS Neuron Inference
Amazon
Cupertino, CA
As a Software Engineer I, you will design and implement business-critical features and contribute to optimizing the performance of models on AWS Trainium end to end. We operate in spaces…
Added 5 mins ago
Staff Software Engineer, Frontend/Fullstack - Moveworks
ServiceNow, Inc.
Mountain View, CA
It all started in sunny San Diego, California in 2004 when a visionary engineer, Fred Luddy, saw the potential to transform how we work. Fast forward to today - ServiceNow stands as a…
Added 5 mins ago
Senior Mechanical Engineer
MKS Instruments Inc
Irvine, CA
As a Senior Mechanical Engineer at MKS Instruments, Irvine Systems, and a member of the Irvine Central Mechanical Engineering Team, you will partner with; Irvine Systems Engineering…
Added 5 mins ago
B&
Associate SCADA Engineer - Renewables & Grid Job Details | Black & Veatch Family of Companies
Black & Veatch
Irvine, CA
- $95,186 to $158,965 USD / year
Black & Veatch is seeking an Associate SCADA Engineer to support the technical design of substation and renewable energy Supervisory Control and Data Acquisition (SCADA) systems.
Added 5 mins ago
Agentic Data Cloud Customer Engineer III, Telco, Media, Entertainment and Gaming, Google Cloud
Google
Mountain View, CA · Sunnyvale, CA
10 years of experience as a data or systems engineer, solutions architect, or pre-sales consultant.

Raymond James & Associates, Inc.

Lead Vulnerability Research Engineer

Saint Petersburg, FL, United States
Southfield, MI, United States

Apply on raymondjames.wd1.myworkdayjobs.com About employer

Applications open in a new tab.

Job details

Experience: General Experience - 6 to 10 years
Posting language: English
Posted: Nov 12, 2026

Original job description

Job Description Summary The financial services industry is continuously targeted by sophisticated cyber adversaries ranging from criminal organizations to nation-state actors. Raymond James relies on the Cyber Threat Center (CTC) to identify, assess, and reduce technology risk across the enterprise.

The Lead Vulnerability Research Engineer will be a hands-on technical leader within Vulnerability Management, responsible for discovering, validating, and operationalizing knowledge of vulnerabilities that present credible risk to the firm. The role combines threat-informed vulnerability research, offensive security, software engineering, data analysis, and security automation. The engineer will investigate emerging vulnerabilities and attack techniques; determine exploitability, reachability, and enterprise relevance; and convert research into repeatable detection, prioritization, validation, and remediation capabilities at scale.

The engineer will responsibly apply AI-assisted techniques to accelerate hypothesis generation, code and patch analysis, test development, finding correlation, exploit-path reasoning, and remediation guidance. AI output must remain subject to rigorous human validation, security and privacy controls, reproducibility standards, and measurable quality outcomes. The role will partner across threat intelligence, security operations, application security, infrastructure, cloud, engineering, architecture, and technology risk teams to reduce exposure before adversaries can act.

Job Description

This position follows a hybrid work model, with an expectation to be in the office 3 days per week in a Raymond James Corporate Office location (St. Petersburg FL, Southfield MI, Memphis TN, or Denver, CO)

Please note: This role is not eligible for Work Visa sponsorship, either currently or in the future.

Responsibilities:

Lead threat-focused vulnerability research across enterprise applications, APIs, operating systems, network devices, cloud services, containers, open-source components, commercial products, and emerging AI-enabled technologies.
Continuously analyze threat intelligence, vendor advisories, public exploit research, malware and campaign reporting, security-research disclosures, and internal telemetry to identify vulnerabilities with credible relevance to the enterprise.
Perform authorized, controlled technical research to validate vulnerability conditions, affected versions, attack prerequisites, exploitability, reachability, likely impact, and available mitigations without creating unnecessary operational risk.
Develop safe detection and validation content such as authenticated checks, queries, signatures, scripts, test harnesses, configuration assessments, and exposure analytics. Ensure research artifacts are reviewed, version-controlled, documented, and designed to avoid disruption.
Build production-quality automation and integrations that ingest, normalize, enrich, correlate, deduplicate, prioritize, ticket, route, retest, and close vulnerability findings across scanners, asset inventories, threat-intelligence sources, software inventories, cloud platforms, endpoint tools, and engineering systems.
Create threat-informed prioritization models that incorporate active exploitation, adversary behavior, exploit maturity, internet exposure, asset criticality, application context, business service dependency, reachability, compensating controls, data sensitivity, and remediation feasibility.
Use AI-assisted research capabilities to summarize technical evidence, identify likely vulnerable code paths, compare patches, generate and refine test hypotheses, correlate findings, propose validation steps, draft remediation guidance, and help ensure responsible use of AI-assisted security workflows.
Provide rapid technical analysis for high-risk and actively exploited vulnerabilities, including concise impact assessments, affected-asset logic, interim mitigations, detection opportunities, validation procedures, and executive-ready risk communication.

Knowledge, Skills, and Abilities:

Demonstrated expertise identifying, validating, explaining, and remediating application and API vulnerabilities, including vulnerability classes represented in the OWASP Top 10 and OWASP API Security Top 10.
Advanced understanding of authentication, authorization, session management, cryptography, input handling, deserialization, server-side request forgery, business-logic abuse, and modern client/server attack surfaces.
Hands-on experience with SAST, DAST, IAST, SCA, API testing, secrets detection, container scanning, infrastructure-as-code scanning, and penetration-testing tools; ability to tune controls and validate tool output rather than rely solely on scanner severity.
Strong automation and software engineering capability in Python and at least one of PowerShell, JavaScript/TypeScript, Go, Java, C#, or shell; experience consuming REST/GraphQL APIs, processing structured data, writing tests, and maintaining production-quality code.
Experience integrating security tools with CI/CD and engineering platforms such as GitHub, GitLab, Azure DevOps, Jenkins, Jira, or comparable technologies.
Demonstrated experience applying AI-assisted or machine-learning-enabled security tooling to source-code review, vulnerability triage, exploit-path analysis, test generation, remediation support, or finding correlation.
Experience securing cloud-native applications on Microsoft Azure, Amazon Web Services, and/or Google Cloud Platform, including identity, secrets, workloads, APIs, containers, serverless services, and Kubernetes.
Ability to communicate technical risk clearly to developers, architects, executives, auditors, and non-technical stakeholders, and to translate findings into prioritized engineering actions.
Ability to lead through influence, exercise sound judgment under uncertainty, mentor others, and balance security outcomes with client and business needs.

Previous Experience:

Typically requires three or more years of hands-on experience in vulnerability research, vulnerability management engineering, offensive security, penetration testing, exploit validation, security tooling development, detection engineering, product security, application security, or a closely related discipline.
Demonstrated hands-on experience using leading large language model platforms, including OpenAI GPT models and Anthropic Claude models, for security research, code and patch analysis, hypothesis generation, finding correlation, exploit-path reasoning, test development, technical writing, and remediation support.
Demonstrated ability to translate analyst procedures into repeatable AI-assisted workflows for vulnerability intake, advisory and patch analysis, exposure assessment, proof-of-concept review, affected-asset identification, threat-informed prioritization, remediation guidance, retesting, reporting, and knowledge capture.
Practical experience evaluating multiple models and selecting fit-for-purpose approaches based on reasoning quality, coding performance, context requirements, latency, cost, privacy, data residency, and security constraints rather than relying on a single model or provider.
Demonstrated experience developing security automation and integrating vulnerability data, AI-assisted analysis, and security controls with CI/CD platforms, source-control systems, scanners, asset inventories, cloud services, ticketing platforms, threat-intelligence sources, and security data platforms.

Certifications:

One or more of the following certifications, or the ability to obtain a relevant certification within one year, is preferred:

Offensive Security Certified Professional (OSCP), Offensive Security Experienced Penetration Tester (OSEP), Offensive Security Web Expert (OSWE), or comparable advanced offensive-security credential.
GIAC Exploit Researcher and Advanced Penetration Tester (GXPN), GIAC Penetration Tester (GPEN), GIAC Web Application Penetration Tester (GWAPT), or comparable vulnerability-research or assessment certification.
Relevant cloud, Kubernetes, secure software, reverse-engineering, incident-response, or DevSecOps certification aligned with the assigned environment.

Education High School (HS) - Completed (Required)

Work Experience General Experience - 6 to 10 years

Certifications

Travel Less than 25%

Workstyle Hybrid

The total compensation for this position includes base salary or wages, and may include components such as additional compensation (cash or equity), discretionary bonuses, or commissions. This position is eligible for a benefits package that may include medical, dental, and vision; life insurance; critical illness insurance and accident insurance; disability benefits; retirement savings; paid time off (including vacation, holidays, and sick leave); and parental leave. Eligibility for benefits and specific offerings may vary based on position and employment status. To view more details of the benefits offered, visit Myrjbenefits.com.

At Raymond James our associates use five guiding behaviors (Develop, Collaborate, Decide, Deliver, Improve) to deliver on the firm's core values of client-first, integrity, independence and a conservative, long-term view.

We expect our associates at all levels to:

Grow professionally and inspire others to do the same
Work with and through others to achieve desired outcomes
Make prompt, pragmatic choices and act with the client in mind
Take ownership and hold themselves and others accountable for delivering results that matter
Contribute to the continuous evolution of the firm

At Raymond James – as part of our people-first culture, we honor, value, and respect the uniqueness, experiences, and backgrounds of all of our Associates. When associates bring their best authentic selves, our organization, clients, and communities thrive. The Company is an equal opportunity employer and makes all employment decisions on the basis of merit and business needs.

Apply on raymondjames.wd1.myworkdayjobs.com About employer

Report this job

Work requirements

Jobs in the United States