Vulnerability Researcher (Remote)

About the role

We are hiring a Vulnerability Researcher to conduct deep technical analysis to identify software vulnerabilities across systems and applications. This role offers a unique opportunity to work with a global leader in the Technology, Information and Internet industry, contributing to enhanced security posture and risk mitigation for critical systems.

Responsibilities

• Perform static and dynamic analysis of software to detect vulnerabilities in codebases and infrastructure.
• Develop proof-of-concept exploits to validate identified vulnerabilities and assess their impact.
• Collaborate with engineering teams to triage and prioritize security findings for remediation.
• Research emerging threats, attack vectors, and zero-day vulnerabilities in relevant technologies.
• Document findings, including technical details, risk assessments, and mitigation recommendations.

Requirements

• Proficiency in programming languages such as C, C++, Python, or Go for vulnerability analysis and exploitation.
• Experience with reverse engineering tools like IDA Pro, Ghidra, or Binary Ninja.
• Knowledge of common vulnerability types, including buffer overflows, race conditions, and injection flaws.
• Familiarity with network protocols, operating systems internals, and memory corruption techniques.
• Hands-on experience with fuzzing tools like AFL, LibFuzzer, or Honggfuzz.
• Understanding of secure coding practices and secure development lifecycle methodologies.
• Ability to produce clear, technical reports for stakeholders at varying levels of expertise.

Pay

$240K - $400K/yr