Vulnerability Researcher (Remote)

About the role

We are seeking a Vulnerability Researcher to join a global technology leader. The position is fully remote and focuses on discovering, analyzing, and reporting software vulnerabilities across a wide range of systems and applications.

Key responsibilities

• Perform static and dynamic analysis of codebases and infrastructure to uncover security flaws.
• Develop proof‑of‑concept exploits to validate findings and assess impact.
• Collaborate with engineering teams to triage, prioritize, and remediate security issues.
• Research emerging threats, zero‑day vulnerabilities, and novel attack vectors.
• Document technical findings, risk assessments, and mitigation recommendations.

Required profile

• Strong programming background with experience in C, C++, Python, or Go.
• Hands‑on experience using reverse‑engineering tools such as IDA Pro, Ghidra, or Binary Ninja.
• Familiarity with common vulnerability types like buffer overflows, race conditions, and injection flaws.
• Understanding of operating system internals, memory‑corruption techniques, and network protocols.
• Experience with fuzzing frameworks such as AFL, LibFuzzer, or Honggfuzz.

Required skills

• Static and dynamic code analysis
• Exploit development and proof‑of‑concept creation
• Reverse engineering
• Fuzz testing
• Secure coding practices and SDLC knowledge

What we offer

• Competitive compensation ranging from $240K to $400K per year.
• Fully remote work environment with flexibility to work from anywhere.
• Opportunity to influence security posture of a leading technology organization.
• Collaboration with cross‑functional teams on high‑impact security initiatives.