Vulnerability Researcher (Remote)

About the role

We are seeking a full‑time Vulnerability Researcher to work remotely for a global leader in technology and information security. The role focuses on deep technical analysis, reverse engineering, and threat modeling to uncover software vulnerabilities across a wide range of systems and applications.

Key responsibilities

• Perform static and dynamic analysis of software to identify security flaws.
• Develop proof‑of‑concept exploits to validate findings and assess impact.
• Collaborate with engineering teams to triage, prioritize, and remediate security issues.
• Research emerging threats, attack vectors, and zero‑day vulnerabilities.
• Document findings with detailed technical reports, risk assessments, and mitigation recommendations.

Required profile

• Strong background in vulnerability analysis and exploitation.
• Experience conducting static and dynamic code analysis.
• Ability to create and test proof‑of‑concept exploits.
• Proven track record of collaborating with cross‑functional engineering teams.
• Research experience on emerging security threats and zero‑day exploits.
• Excellent written communication for technical and non‑technical audiences.

Required skills

• Proficiency in C, C++, Python, and Go.
• Experience with reverse‑engineering tools such as IDA Pro, Ghidra, or Binary Ninja.
• Familiarity with fuzzing frameworks like AFL, LibFuzzer, or Honggfuzz.
• Knowledge of buffer overflows, race conditions, injection flaws, and memory‑corruption techniques.
• Understanding of network protocols, operating‑system internals, and secure coding practices.

What we offer

• Competitive salary range of $240K‑$400K per year.
• Fully remote work environment with flexibility to work from anywhere.
• Opportunity to contribute to the security posture of a leading technology organization.
• Collaboration with world‑class security and engineering teams.