Vulnerability Researcher (Remote)

About the role

We are seeking a Vulnerability Researcher to join a leading technology organization on a full‑time remote basis. The role focuses on deep technical analysis of software to uncover and assess security weaknesses across a range of systems and applications.

Key responsibilities

• Perform static and dynamic analysis of software to detect vulnerabilities in codebases and infrastructure.
• Develop proof‑of‑concept exploits to validate identified vulnerabilities and assess their impact.
• Collaborate with engineering teams to triage, prioritize, and remediate security findings.
• Research emerging threats, attack vectors, and zero‑day vulnerabilities in relevant technologies.
• Document findings with technical details, risk assessments, and mitigation recommendations.

Required profile

• Proficiency in C, C++, Python, or Go for vulnerability analysis and exploitation.
• Experience with reverse‑engineering tools such as IDA Pro, Ghidra, or Binary Ninja.
• Hands‑on experience with fuzzing tools like AFL, LibFuzzer, or Honggfuzz.
• Strong knowledge of common vulnerability types (buffer overflows, race conditions, injection flaws) and memory‑corruption techniques.
• Familiarity with network protocols, operating‑system internals, and secure coding practices.
• Ability to produce clear, technical reports for stakeholders at varying levels of expertise.

Required skills

• C
• C++
• Python
• Go
• IDA Pro
• Ghidra
• Binary Ninja
• AFL
• LibFuzzer
• Honggfuzz

What we offer

• Remote work from anywhere
• Competitive compensation ranging from $240K to $400K per year
• Opportunity to work with a global leader in technology, information, and internet services
• Collaboration with cross‑functional teams to improve security architecture and incident response