Manager, Security Research

Truffle Security Co.

Manager leading a research team at Truffle Security, focusing on securing non-human identities and preventing credential leakage. Work remotely leading impactful research in cybersecurity.

Posted 4/27/2026full-timeRemote • 🇺🇸 United StatesMid-LevelSenior💰 $225,000 - $260,000 per yearWebsite

About the role

Key responsibilities & impact

Owning and driving the research roadmap, focusing on the highest-impact problems in leaked credentials, secrets exposure, and non-human identity security.
Leading a team of experienced researchers, setting direction, assigning ownership of critical initiatives aligned to the roadmap, and ensuring research output consistently translates into product and company impact.
Identifying and validating novel leak surfaces across code, SaaS tools, logs, datasets, and emerging ecosystems (including AI/LLMs).
Designing and running large-scale scans and experiments to uncover real-world exposures, validate impact, and understand attacker behavior.
Developing verification systems at scale to distinguish real, exploitable secrets from noise—improving precision without sacrificing coverage.
Publishing high-quality technical research (blogs, reports, disclosures) and representing Truffle externally through talks, conferences, and community engagement.
Acting as a bridge between research and product, ensuring insights turn into shipped capabilities and roadmap decisions.
Collaborating cross-functionally with marketing, sales, and developer relations to turn research into clear, compelling narratives for customers and the broader security community.

Requirements

What you’ll need

Proven experience leading and growing a research team, with strong ownership over direction and outcomes.
Strong product instincts: you know the difference between interesting research and work that actually improves customer outcomes.
Deep expertise in secret scanning, including detection techniques (regex, entropy, ML-assisted), and especially verification at scale.
Track record of discovering non-obvious, high-impact vulnerabilities or leak surfaces and validating their real-world exploitability.
Experience turning research into shipped product improvements, not just standalone findings.
Strong attacker mindset—you think in terms of how systems break, not just how they’re designed.
Ability to work with messy, high-volume data (credentials, tokens, secrets) and turn it into clear insights and system improvements.
Experience building or working on security scanners, detection systems, or large-scale data pipelines.
Experience defining metrics, benchmarks, and evaluation frameworks for detection quality (precision, recall, verification accuracy).
Strong technical communication skills, with experience publishing research or speaking publicly.
Experience working cross-functionally with product, engineering, and go-to-market teams.
Familiarity with non-human identity systems (API keys, service accounts, OAuth tokens).

Benefits

Comp & perks

Fully remote within the U.S. – We believe opportunity shouldn’t be limited by geography. Our remote-first approach lets us hire the best people across the United States and empowers them to do their best work from wherever they are.
A culture of mentorship, equity, and psychological safety – We’re committed to fostering an environment where you can thrive, learn, and feel valued.
Competitive salary & meaningful equity – Be rewarded for your contributions with a strong compensation package and a stake in our shared success.
Flexible paid time off – We operate with a high level of autonomy and trust, giving you the flexibility to take time off as needed—no strict limits, just the expectation that you’re meeting your commitments and getting your work done.
14 paid holidays – Including Thanksgiving, Winter Break, and "Truffle Holidays" when the entire company takes a well-deserved day off together.
Comprehensive health benefits – Medical, dental, and vision coverage with 80% of premiums covered for you and your dependents.
Remote work stipend – Get set up for success with an $800 new hire stipend and $100/month to keep your workspace comfortable.
Health & wellness stipend – $1,200/year to support your physical, mental, and emotional well-being— we believe that feeling good helps you do great work.
Learning & development stipend – $2,000/year to invest in your growth, whether it’s courses, certifications, or industry conferences.
401(k) match – We match 100% of the first 6% of your contributions on every paycheck, helping you build financial security for the future.
100% remote + company off-sites – Twice a year, we come together in amazing locations like Hawaii, Cabo, and the Rocky Mountains to collaborate and connect.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

secret scanningdetection techniquesregexentropyML-assisted verificationsecurity scannersdetection systemslarge-scale data pipelinesmetrics definitionevaluation frameworks

Soft Skills

leadershipownershipproduct instinctsattacker mindsettechnical communicationcross-functional collaborationresearch translationcommunity engagementnarrative developmentinsight generation