Job description

Role Overview

Seeking a Vulnerability Researcher for a full-time remote position with a global technology leader. The position focuses on identifying and analyzing software vulnerabilities across various systems and applications using advanced technical methods.

Key Responsibilities

Conduct thorough static and dynamic software analyses to uncover security flaws in codebases and infrastructures.
Create proof-of-concept exploits to demonstrate vulnerabilities' potential impacts.
Work closely with engineering teams to assess, prioritize, and remediate security issues.
Research and monitor new threats, attack strategies, and zero-day vulnerabilities applicable to the technology stack.
Document vulnerabilities, including detailed technical information, risk evaluations, and suggestions for mitigation.

Required Skills & Qualifications

Proficiency in programming languages such as C, C++, Python, or Go related to vulnerability research and exploitation.
Experience utilizing reverse engineering tools like IDA Pro, Ghidra, or Binary Ninja.
In-depth understanding of common vulnerability types including buffer overflows, race conditions, and injection issues.
Knowledge of network protocols, OS internals, and memory corruption attack methods.
Hands-on experience with fuzz testing tools such as AFL, LibFuzzer, or Honggfuzz.
Familiarity with secure coding principles and the secure software development lifecycle.
Capability to compose clear and detailed technical reports targeted at diverse stakeholders.

Additional Information

This role presents an excellent chance to contribute to enhancing the security posture of a leading global firm in technology and internet industries. The position involves collaboration with multiple teams focused on security architecture improvements and incident response.

Equal Opportunity Statement

The employer is committed to hiring based solely on skills and qualifications, welcoming applicants of any background or employment history.