- 经验
- 任何
- 薪水
- USD 240,000 – USD 400,000 / year
- 职位空缺
- 1
- 发布
- 13 小时前
- 工作模式
- 在家办公
- 恢复
- 需要申请
职位描述
Role Summary
We are seeking a skilled Vulnerability Researcher to join a leading client in the technology and internet industry on a full-time remote basis. The selected professional will be responsible for performing comprehensive technical investigations to uncover security weaknesses across various software and systems.
Primary Duties
- Execute both static and dynamic software analyses to identify potential vulnerabilities within codebases and infrastructures.
- Create proof-of-concept exploit demonstrations to confirm the presence and severity of detected security flaws.
- Work closely with engineering teams to evaluate and prioritize security issues for remediation efforts.
- Investigate new and evolving threats, attack strategies, and zero-day vulnerabilities relevant to the technology landscape.
- Prepare detailed documentation outlining technical findings, risk impact assessments, and suggested mitigation tactics.
Required Expertise
- Strong programming skills in C, C++, Python, or Go applied toward vulnerability detection and exploitation.
- Experience with reverse engineering utilities such as IDA Pro, Ghidra, or Binary Ninja.
- Familiarity with prevalent vulnerability categories including buffer overflows, race conditions, and injection attacks.
- Understanding of network protocols, operating system internals, and techniques involving memory corruption.
- Practical knowledge in the use of fuzzing tools like AFL, LibFuzzer, or Honggfuzz.
- Awareness of secure coding disciplines and security-focused software development lifecycle processes.
- Capability to generate concise, technical reporting suitable for diverse stakeholder audiences.
Additional Information
This position presents a unique chance to contribute to the security enhancement initiatives of a prominent global technology enterprise. The role involves significant collaboration with various cross-functional teams focused on advancing security frameworks and incident handling procedures.
Compensation and Location
The role is fully remote and offers an annual salary range between $240,000 and $400,000.
Equal Opportunity Assurance
The employer commits to nondiscriminatory hiring based strictly on skills and qualifications without regard to background or prior work history.