Principal Research Analyst - Information Security

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Principal Research Analyst - Information Security based in United States.

This role serves as a senior subject matter expert shaping forward-thinking research, guidance, and practical resources across information security and cybersecurity.
You’ll translate complex security trends, technologies, frameworks, and industry practices into clear, credible content that helps technology professionals make informed decisions.
The position combines deep enterprise security expertise with research, thought leadership, public speaking, and cross-functional collaboration.
You’ll work with business teams, marketing, events, leadership, and volunteer subject matter experts to develop and integrate content across publications, conferences, webinars, and other channels.
The role provides an opportunity to influence the broader cybersecurity community through research, practitioner guidance, industry engagement, and external representation.
You’ll also monitor emerging technologies and security developments, including the responsible adoption and risk implications of artificial intelligence.
This position is suited to an experienced cybersecurity professional who brings strong analytical and communication skills, practical enterprise experience, and the ability to turn research into actionable insights.

\n

Accountabilities:

• Lead the creation, review, and delivery of high-quality information security content, including articles, whitepapers, research reports, audit programs, frameworks, and practitioner aids.
• Ensure research and professional practice materials align with established industry standards, relevant frameworks, and strategic priorities.
• Serve as a senior internal subject matter expert across information security and related cybersecurity domains.
• Recruit, coordinate, and guide volunteer subject matter experts in the development, review, and validation of professional content.
• Provide expert guidance throughout research and content development cycles, including publications, practitioner resources, and examination preparation materials.
• Represent the organization externally through industry conferences, panels, podcasts, webinars, workshops, and professional events.
• Evaluate conference proposals and review presentations to ensure technical accuracy, relevance, and strategic alignment.
• Respond to technical inquiries from members and partners, providing practical interpretation of security practices, trends, and emerging issues.
• Conduct secondary research, monitor industry developments, and maintain current knowledge of cybersecurity technologies, standards, threats, and practices.
• Collaborate with business units, marketing, events, and leadership teams to integrate information security content consistently across member-facing initiatives.
• Contribute to strategic communications and brand-building initiatives that strengthen visibility, credibility, and engagement within the global technology ecosystem.
• Research vendors and technology markets, evaluate product capabilities, and perform competitive analysis to support research and content development.
• Translate complex research findings into clear written reports, presentations, and other practitioner-focused deliverables.
• Apply AI responsibly and in accordance with organizational policies when conducting research, developing content, or improving workflows.
• Support partnerships and external relationships that advance knowledge and engagement across the information security community.

Requirements:

• Bachelor’s degree in cybersecurity, computer science, information systems, or a related field, or an equivalent combination of education and professional experience.
• At least 8 years of experience in a relevant cybersecurity, research, advisory, or professional practice role with a demonstrated record of success.
• At least 5 years of enterprise information security program experience, including recent experience within the past 24 months securing modern hybrid enterprise environments.
• CISM or CISSP certification required.
• Deep working knowledge of core cybersecurity domains, including network security, endpoint security, identity and access management, cloud security, application security, and incident response.
• Strong familiarity with established security frameworks and taxonomies such as NIST CSF, MITRE ATT&CK, ISO 27001, and CIS Controls.
• Practical knowledge of major cloud platforms such as AWS, Azure, and GCP, including cloud security controls and audit considerations.
• Proven experience conducting secondary research and producing high-quality research reports and professional content.
• Demonstrated public-facing thought leadership experience through conference presentations, webinars, podcasts, published articles, or similar professional forums.
• Experience responding to stakeholder inquiries and providing expert guidance on industry practices, trends, and emerging technologies.
• Strong business writing skills and the ability to transform complex research into clear, useful content for professional audiences.
• Excellent critical thinking, analytical, collaboration, and cross-functional stakeholder engagement skills.
• Working knowledge of artificial intelligence technologies, relevant applications, appropriate use cases, and associated information security risks.
• Proven ability to work effectively with vendors and assess technology markets, capabilities, and competitive positioning.
• Ability to manage multiple priorities, work independently, and collaborate across teams to meet deadlines and strategic objectives.
• Preferred: Master’s degree in cybersecurity, computer science, information systems, or a related discipline.
• Preferred: 10+ years of experience in a comparable role or capacity.
• Preferred: Experience in regulated industries such as financial services, healthcare, or energy, or experience working with regulators and compliance programs.
• Preferred: Direct experience with procurement, implementation, and operationalization of AI technologies.
• Preferred: Experience in threat intelligence, detection engineering, malware or attack analysis, and threat modeling.
• Preferred: AAISM certification.
• Willingness to travel primarily domestically, with occasional international travel, for conferences, professional events, workshops, and external meetings.

Benefits:

• Annual salary range of $113,503–$170,309.
• Benefits package supporting employee health, wellbeing, and professional needs.
• Opportunities to participate in industry conferences, professional events, workshops, and other knowledge-sharing activities.
• Opportunities to build visible thought leadership through research, publications, speaking engagements, webinars, and podcasts.
• Collaborative environment focused on advancing cybersecurity knowledge and professional practices.
• Opportunities to work with leading security frameworks, emerging technologies, cloud environments, and evolving information security challenges.
• Potential for professional development and continued advancement within the information security and research field.
• Primarily remote work environment within the United States.
• Occasional domestic and international travel connected to professional and organizational priorities.

\n

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

 Why Apply Through Jobgether? 

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1