[vrfvr]

A person who's job it is to do research on security of software

[cjbprime]

In the infosec community, "researcher" is the noun of choice to describe anyone who has discovered a security vulnerability, no matter their motivation or experience.

[lucideer]

So pay is a prerequisite and not skillset? Surely that would just be a "professional researcher", no?

And even so, does a freelance researcher "have a job", in the traditional sense?