Vulnerability Researcher

Job not on LinkedIn

🔥 1 minute ago

🌐 Poland, Bulgaria – Remote

🇵🇱 Poland – Remote 🇧🇬 Bulgaria – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

✨ Researcher

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

SD Solutions

WebsiteLinkedInAll Job Openings

201 - 500 employees

💼 Consulting

📦 Logistics

📣 Marketing

Consulting • Logistics • Marketing

SD Solutions is a company that specializes in providing a variety of staffing and outsourcing solutions aimed at driving IT-driven businesses towards growth. The company offers services such as Staff Augmentation, Recruitment Process Outsourcing (RPO), Business Process Outsourcing (BPO), and Employer of Record (EoR), which allow businesses to hire globally without the need to establish a legal entity abroad. SD Solutions focuses on empowering businesses with comprehensive services tailored for global expansion and offers strategic guidance and consulting. They provide dedicated engineering, data science, and DevOps teams to ensure seamless technological evolution. With significant experience and a strong track record, SD Solutions helps businesses scale and transform dynamically.

📋 Description

• Review cybersecurity prompts submitted to an AI system that could not confidently classify them as benign or malicious • Determine each prompt's underlying intent and goal, including whether the purpose is legitimate or harmful • Apply domain expertise to assess technical context, specificity, and real-world uplift a response would provide an attacker • Annotate each prompt with an intent label and clear written rationale according to project guidelines • Independently annotate the same prompts as a second researcher • Escalate cases where researchers disagree to a reviewer • Flag ambiguous cases, emerging attack techniques, and guideline gaps • Help improve the project guidelines

🎯 Requirements

• Minimum of 5 years of proven, hands-on experience in vulnerability research and reverse engineering • Proven ability to discover vulnerabilities through fuzzing, static and dynamic analysis, and patch diffing • Exploit development experience, including memory corruption, heap exploitation, ROP, and mitigation bypasses (ASLR, DEP, CFI) • Fluent use of IDA, Ghidra, Binary Ninja, and debuggers (WinDbg, GDB, LLDB) on x86/x64 and ARM binaries • Understanding of the CVE lifecycle, n-day versus 0-day work, and how public PoCs are weaponized • Strong analytical judgment to infer a user's underlying goal from a short prompt and distinguish defensive, educational, and research use from attack preparation • Clear written communication in English, with the ability to document reasoning concisely • OSED, OSEE, or GIAC GXPN certifications are nice to have • Demonstrated online achievements, write-ups, or contributions on HackTheBox, Pwn2Own, TryHackMe, Bug Bounty programs, or published security research are nice to have

🏖️ Benefits

• Benefits offered by SD Solutions; details available by contacting the company • Freelance contributor pool opportunity mentioned in the company description