Vulnerability Researcher (Remote)

About the role

We are seeking a full‑time Vulnerability Researcher to work remotely for a leading technology and internet company. The role focuses on deep technical analysis to uncover software vulnerabilities across a wide range of systems and applications.

Key responsibilities

• Perform static and dynamic analysis of software to detect vulnerabilities in codebases and infrastructure.
• Develop proof‑of‑concept exploits to validate identified vulnerabilities and assess their impact.
• Collaborate with engineering teams to triage and prioritize security findings for remediation.
• Research emerging threats, attack vectors, and zero‑day vulnerabilities in relevant technologies.
• Document findings, including technical details, risk assessments, and mitigation recommendations.

Required profile

• Proficiency in programming languages such as C, C++, Python, or Go for vulnerability analysis and exploitation.
• Experience with reverse engineering tools like IDA Pro, Ghidra, or Binary Ninja.
• Knowledge of common vulnerability types, including buffer overflows, race conditions, and injection flaws.
• Familiarity with network protocols, operating system internals, and memory‑corruption techniques.
• Hands‑on experience with fuzzing tools such as AFL, LibFuzzer, or Honggfuzz.
• Understanding of secure coding practices and secure development lifecycle methodologies.
• Ability to produce clear, technical reports for stakeholders at varying levels of expertise.

Required skills

• C
• C++
• Python
• Go
• IDA Pro
• Ghidra
• Binary Ninja
• AFL
• LibFuzzer
• Honggfuzz

What we offer

• Fully remote work arrangement.
• Competitive salary ranging from $240,000 to $400,000 per year.
• Opportunity to contribute to the security posture of a global technology leader.
• Collaboration with cross‑functional teams to drive security improvements.