Vulnerability Researcher (Remote)

Location: Remote (Work from Anywhere)

Job Type: Full-Time

About the Role

We are hiring a Vulnerability Researcher to conduct deep technical analysis to identify software vulnerabilities across systems and applications. This role involves reverse engineering, code analysis, and threat modeling to assess potential security risks.

Responsibilities

• Perform static and dynamic analysis of software to detect vulnerabilities in codebases and infrastructure.
• Develop proof-of-concept exploits to validate identified vulnerabilities and assess their impact.
• Collaborate with engineering teams to triage and prioritize security findings for remediation.
• Research emerging threats, attack vectors, and zero-day vulnerabilities in relevant technologies.
• Document findings, including technical details, risk assessments, and mitigation recommendations.

Requirements

• Proficiency in programming languages such as C, C++, Python, or Go for vulnerability analysis and exploitation.
• Experience with reverse engineering tools like IDA Pro, Ghidra, or Binary Ninja.
• Knowledge of common vulnerability types, including buffer overflows, race conditions, and injection flaws.
• Familiarity with network protocols, operating systems internals, and memory corruption techniques.
• Hands-on experience with fuzzing tools like AFL, LibFuzzer, or Honggfuzz.
• Understanding of secure coding practices and secure development lifecycle methodologies.
• Ability to produce clear, technical reports for stakeholders at varying levels of expertise.

Pay

$240K - $400K/yr

About the Opportunity

This role offers a unique opportunity to work with a global leader in the Technology, Information, and Internet industry, contributing to enhanced security posture and risk mitigation for critical systems. The position involves direct collaboration with cross-functional teams to drive improvements in security architecture and incident response.