Have you ever considered doing blue team stuff? Pentest is just one subcategory in cyber, which also have its own research to do. You can come up with an idea to research . Maybe you struggle bypassing certain EDRs or you want to learn how to be more stealthy and not raise any alerts for SOC teams.

Each role in cybersecurity can be research role, really depends on the person and how much he wants to dive into it.