Vulnerability Researcher

Job Scope

• Collaborate with fellow researchers to investigate vulnerabilities and threats across a range of software and platforms
• Conduct fuzzing, reverse engineering, and code audit to uncover security flaws in software and hardware
• Perform security assessments through vulnerability research, black box testing, and proof-of-concept development
• Develop proof-of-concept code and exploits, and where relevant, work them up into reliable end-to-end chains
• Investigate security flaws found and provide insights and remedies to counter cyber threats
• Stay on top of developments in the security landscape such as new attack techniques, security mitigations, and shifts in the attack surface
• Research and engineer novel approaches to offensive security problems

Requirements

• Diploma/Degree in Information Systems, Computer Science, Computer Engineering, Information Technology, Mathematics, or equivalent
• Strong interest and passion for vulnerability research and offensive security
• Strong problem-solving and troubleshooting skills
• Creative, innovative, self-motivated, and able to work independently as well as within a broader team effort
• Knowledge of C, C++, Python, and/or ARM/AArch64 assembly would be an added advantage
• Knowledge of Android/iOS internals and security mitigations would be an added advantage
• Familiarity with reverse engineering tools (e.g. Binary Ninja, IDA, Ghidra, Frida)
• Good written English
• Entry-level, mid-level, senior, and principal positions available

We weigh depth of understanding and quality of work over any specific credential. Strong candidates come from security research roles, CTF backgrounds, bug bounty work, academic research, or self-directed projects.

Skills

IDA, X86 Assembly, Black Box Testing, Computer Engineering, Cyber Security, Information Systems, well-documented code, C Language, Computer Science, Attack Surface Management, Offensive Security, Analytical and Problem-Solving Skills, Operational Technology Security Audit Management, Vulnerability Assessment, Able To Work Independently, Threat and Vulnerability Management