Vulnerability Researcher (Remote)

About the role

We are hiring for a client as a Member of Technical Staff, Vulnerability Researcher. The role involves deep technical analysis to identify software vulnerabilities across systems and applications, including reverse engineering, code analysis, and threat modeling.

Key responsibilities

• Perform static and dynamic analysis of software to detect vulnerabilities in codebases and infrastructure.
• Develop proof‑of‑concept exploits to validate identified vulnerabilities and assess their impact.
• Collaborate with engineering teams to triage and prioritize security findings for remediation.
• Research emerging threats, attack vectors, and zero‑day vulnerabilities in relevant technologies.
• Document findings, including technical details, risk assessments, and mitigation recommendations.

Required profile

• Proficiency in programming languages such as C, C++, Python, or Go for vulnerability analysis and exploitation.
• Experience with reverse engineering tools like IDA Pro, Ghidra, or Binary Ninja.
• Knowledge of common vulnerability types, including buffer overflows, race conditions, and injection flaws.
• Familiarity with network protocols, operating system internals, and memory corruption techniques.
• Hands‑on experience with fuzzing tools like AFL, LibFuzzer, or Honggfuzz.
• Understanding of secure coding practices and secure development lifecycle methodologies.
• Ability to produce clear, technical reports for stakeholders at varying levels of expertise.

Required skills

• C
• C++
• Python
• Go
• IDA Pro
• Ghidra
• Binary Ninja
• AFL
• LibFuzzer
• Honggfuzz