Security researcher is a common term, there's also market research which doesn't look like it falls under your definition