{"id":2124562,"url":"https://alion.io/job/npl-principal-vulnerability-researcher","title":"Principal Vulnerability Researcher","company":{"id":1766463,"name":"National Physical Laboratory","domain":"npl.co.uk","url":"https://alion.io/company/npl-co-uk","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Eploy","truth_index":{"grade":"A","score":100,"open_postings":4,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":16,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Teddington, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":85000,"max_usd":150000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":25},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"C++","optional":false},{"name":"Ghidra","optional":false},{"name":"Linux","optional":false},{"name":"Lua","optional":false},{"name":"Python","optional":false}],"status":"closed","first_seen_at":"2026-10-06T01:57:57Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-22T14:30:46Z","board_verified":false,"closed_at":"2026-10-22T14:30:46Z","days_open":16,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":16},"description":"About the Role\nPrincipal Vulnerability Researcher\nOffice-based | Oxfordshire -\nIf relocating is required for this role, NPL may be able to provide relocation support, subject to location and eligibility. Please contact your recruiter to discuss the options available to you.\nWe’re growing our Vulnerability Research Team and are looking for a Principal Vulnerability Researcher to perform security research into a wide-range of carrier-grade telecoms devices, including routers, firewalls, and mobile network nodes.\nThis is a hands-on, office-based role for a researcher with extensive expertise in finding and demonstrating security vulnerabilities in embedded and networked systems.\nThe Role\n· Vulnerability research against real-world network and embedded devices\n· Reverse engineering firmware and binaries to discover security vulnerabilities\n· Performing source code analysis to identify memory safety issues, logic flaws, and design weaknesses\n· Designing and running fuzzing campaigns against protocols, services and interfaces, on both the target device and via emulation\n· Working with a variety of CPU architectures such as ARM, MIPS, PowerPC and x86-64\n· Providing technical leadership and setting research standards\n· Investigating how individual vulnerabilities can be chained to maximise system compromise\n· Developing and maintaining tools to improve personal and team productivity\n· Producing clear, high-quality technical reports describing root cause and impact\nAbout You\nIdeal Background\n· Extensive experience in security or vulnerability research\n· Strong reverse engineering skills using static and dynamic analysis using disassemblers - Ghidra experience is preferred\n· Demonstrated ability to efficiently conduct source code analysis on large codebases\n· Practical experience with fuzzing techniques, tooling, optimisation, and crash triage\n· Strong understanding of embedded systems, OS internals, and networking, including familiarity with underlying hardware\n· Expertise in embedded operating systems such as Linux and VxWorks\n· Proficiency in C/C++, Assembly and scripting languages such as Python or Lua\n· Eagerness to investigate and apply the latest AI tools and techniques\n· Practical experience with network or embedded devices\n· Candidates with published security research or CVEs are particularly encouraged\nWhat’s on Offer\n· Principal-level role with real technical influence\n· Cutting-edge research into complex, heterogeneous systems\n· Collaborative, engineering-driven culture, with high standards for quality\n· Competitive salary and benefits\n· The opportunity to attend major international security conferences and training courses\n· Based in Oxfordshire\nEligibility\nAs you will be required to work with UK Government departments, all applicants must already hold, or be able to obtain, the necessary UK security clearance. Therefore, the following must apply:\n· You must be a British Citizen. If you hold dual nationality, of which one component is British, your application will still be considered.\n· You’ll usually need to have been a resident in the UK for seven out of the last ten years before applying for a role with us.\nAbout Us\nThe National Physical Laboratory (NPL) is a world-leading centre of excellence that provides cutting-edgemeasurement science, engineeringand technology to underpin prosperity and quality of life in the UK. Find out more about what it is like working here\nAt NPL, we believe our success is a result of the diversity and talent of our people. We strive to nurture and respect individuals to ensure everyone feels valued by treating everyone on the basis of their own individual merits and abilities regardless of their own or perceived identity, as part of our commitment to diversity & inclusion, we ensure we’re creating an environment where all our colleagues feel supported and welcome. More about this on our Diversity & Inclusion page.\nWe are committed to the health and well-being of our employees. Flexible working and social activities are embedded in our culture to create a positive work-life balance, along with a broad range of rewards, benefits and recognition. Our values are at the heart of what we do, and they shape the way we interact, develop our peopleand celebrate success.\nTo ensure everyone has an equal chance, we’realways willing to make reasonable adjustments to the recruitment process. If you would like to discuss, please contact us.\n\nSkills\nGeneral Skills - LABORATORY, General Skills - ASSEMBLY, General Skills - TRAINING, General Skills - Science, General Skills - NETWORKING, General Skills - Engineering, Data Analyst - Python, Data Analyst - Analysis, Vulnerability Research - Reverse Engineering, Vulnerability Research - Linux , Vulnerability Research - Ghidra","description_format":"text","description_chars":4777,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":true,"industries":["Testing, Inspection & Certification","Research Institutes","Standards & Industry Bodies"],"lifecycle":[{"event":"open","at":"2026-10-09T00:28:14Z"},{"event":"close","at":"2026-10-20T17:31:57Z"},{"event":"reopen","at":"2026-10-21T05:02:25Z"},{"event":"close","at":"2026-10-21T15:21:48Z"},{"event":"reopen","at":"2026-10-21T20:08:43Z"},{"event":"close","at":"2026-10-22T03:39:53Z"},{"event":"reopen","at":"2026-10-22T07:04:29Z"},{"event":"close","at":"2026-10-22T14:30:46Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker","cap_exempt":false,"checked_at":"2026-10-22T06:27:10+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":null,"pay":null,"html_url":"https://alion.io/job/npl-principal-vulnerability-researcher","json_url":"https://alion.io/job/npl-principal-vulnerability-researcher.json","meta":{"generated_at":"2026-10-22T22:20:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7482,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1766463},"rest":"https://alion.io/mcp/rest/get_company?id=1766463"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnpl-principal-vulnerability-researcher"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnpl-principal-vulnerability-researcher"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnpl-principal-vulnerability-researcher"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/npl-principal-vulnerability-researcher\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnpl-principal-vulnerability-researcher"}]}