Vulnerability Researcher

Job Description: - Conduct thorough research to discover and analyze new security vulnerabilities within your area of expertise, including but not limited to memory corruption, sandboxing escapes, privilege escalation, and code execution vulnerabilities.

• Develop proof-of-concept exploits to demonstrate the impact of discovered vulnerabilities, and collaborate with the development team to create effective patches.
• Utilize advanced tools and techniques for static and dynamic analysis, fuzzing, and manual code reviews to uncover hidden security flaws.
• Maintain detailed documentation of research methodologies, findings, and vulnerability reports, ensuring clarity and completeness.
• Stay up-to-date with the latest trends, tools, and techniques in the field of vulnerability research and security across multiple platforms.

Requirements: - Must be able to demonstrate that you have previously found and exploited vulnerabilities in one or more of the following areas: Windows kernel vulnerabilities and exploitation

• Android application security and exploitation
• Linux kernel vulnerabilities and exploitation
• Modern web browser vulnerabilities (Chrome, Firefox, Safari, Edge)
• Deep understanding of chosen specialization area(s) and underlying architectures
• Proficiency in relevant programming languages such as C/C++, Java/Kotlin (for Android), and scripting languages such as Python
• Experience with reverse engineering tools, debuggers, and fuzzing frameworks (e.g., AFL, LibFuzzer, syzkaller)
• Familiarity with common security vulnerabilities (e.g., buffer overflow, use-after-free, type confusions, integer overflows) and exploitation techniques
• Knowledge of modern security features and mitigations such as sandboxing, ASLR, DEP, CFG, and SELinux/AppArmor.
• Experience with operating system internals, memory management, and process/thread management.
• Strong analytical and problem-solving skills.
• Ability to work independently as well as in a collaborative environment.
• Excellent written and verbal communication skills.
• Attention to detail and a commitment to high-quality research.

Benefits: - 25 days holiday plus bank holidays

• Entry into company pension scheme
• Private healthcare from Axa, including dental and vision coverage
• We offer both TechScheme and Cycle2Work
• Comprehensive training and support to develop your career, including a training budget
• A range of office perks, including free fresh fruit daily, a bean to cup coffee machine and more
• Regular team building and reward events