Senior Vulnerability Researcher

🔥 1 minute ago

🇫🇷 France – Remote

⏰ Full Time

🟠 Senior

✨ Researcher

👻 Ghost score 13%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Cellebrite

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1999

💼 Consulting

🎖️ Defense

⚖️ Legal

💰 Post-IPO Equity on 2021-08

Consulting • Defense • Legal

Cellebrite is a leading provider of digital forensics and intelligence solutions. The company's end-to-end platform aids investigative teams in both the public and private sectors to solve cases more efficiently and securely. Cellebrite offers a range of products and services, including solutions for digital data collection, analysis, and evidence management from mobile and computer devices. These solutions are widely used in criminal investigations, defense, law enforcement, and intelligence agencies, providing tools to extract, analyze, and manage digital evidence. The company's mission is to help bring justice by protecting the innocent and closing cases faster while ensuring data integrity and security.

📋 Description

• Conduct vulnerability research and exploitation on modern mobile and embedded targets • Break into Android devices and other embedded targets, including smartphones and drones • Research the full Android attack surface across userland, kernel, firmware, silicon, and exposed interfaces • Overcome hardware-backed encryption, secure boot chains, hardened security policies, security mitigations, trusted execution environments (TEE/eSE), and related protections • Turn research findings into unique evidence-extraction capabilities • Take deep ownership of assigned technical problems and determine how to solve them • Contribute research that enables lawful extraction of digital evidence for law enforcement and public safety customers • Collaborate with a small, fully remote team of researchers and share work with teammates

🎯 Requirements

• Proven experience in vulnerability research and exploitation, ideally on mobile or other modern targets (Android, iOS, Linux, Windows, macOS) • Strong reverse engineering skills, mainly on ARM/ARM64 and sometimes more exotic architectures • Comfortable working across memory-corruption mitigations (PAC, MTE, CFI, KASLR, and friends) • Enjoyment of solving difficult technical problems involving locked-down systems • Professional fluency in French • Professional fluency in English • No particular degree or certification required • Nice to have: Published research, CVEs, or conference talks • Nice to have: Advanced fuzzing experience • Nice to have: Knowledge in cryptographic primitives and their weaknesses • Nice to have: Offensive hardware research / board design • Nice to have: CTF experience • Nice to have: AI-assisted vulnerability research / agentic workflows • Nice to have: Ability, or willingness to grow into, leading people

🏖️ Benefits

• Fully remote work arrangement • Trust and autonomy to work deeply on hard subjects • Collaborative, close-knit research team environment • Opportunity to work on research with a clear purpose supporting lawful digital investigations and public safety