Cybersecurity Research Specialist

🔥 0 minutes ago

🗽 New York – Remote

🗽 New York – Remote

💵 $210 - $240 / hour

⏳ Contract/Temporary

🟡 Mid-level

🟠 Senior

🔬 Research Analyst

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

24-MAG

WebsiteLinkedInAll Job Openings

2 - 10 employees

🤝 B2B

💼 Consulting

B2B • Consulting

24-MAG is a commercial strategy and execution firm that helps B2B organizations design and implement systems, workflows, and operating rhythms for sales, client management, and cross-functional projects. They focus on transforming scattered processes into aligned, measurable, and scalable commercial functions—covering pipeline structure, account management frameworks, and operational discipline for teams seeking efficient, intentional growth.

📋 Description

• Evaluate technical analyses of complex software vulnerabilities and security scenarios • Validate vulnerability root causes across software, operating systems, networks, cloud environments, and web applications • Assess exploitability, technical feasibility, prerequisites, and security assumptions • Review AI-generated exploit analyses and multi-stage attack reasoning • Evaluate reverse engineering, binary analysis, memory corruption, application security, and offensive-security reasoning • Critique exploit chains and identify weaknesses or inconsistencies • Assess defensive recommendations, mitigation strategies, and secure software engineering guidance • Review security reasoning across operating-system, network, web, cloud, browser, mobile, and embedded-security contexts • Provide structured written feedback explaining technical evaluation decisions • Contribute to structured benchmarks for advanced AI cybersecurity capabilities • Develop or refine evaluation criteria and technical evaluation rubrics • Identify security scenarios that test advanced reasoning capabilities • Help establish consistent standards for evaluating complex cybersecurity outputs

🎯 Requirements

• Strong professional or research background in offensive security, vulnerability research, exploit development, application security, product security, or security engineering • Demonstrated expertise across multiple areas including reverse engineering, binary analysis, vulnerability research, operating systems, networks, web security, or cryptography • Multiple recognised technical achievements, such as competitive CTF performance, published CVEs, major bug-bounty findings, security research publications, or significant public technical contributions • Experience identifying or analysing vulnerabilities affecting widely used open-source or commercial software • Familiarity with reverse-engineering tools such as IDA Pro, Ghidra, Binary Ninja, Radare2, or comparable platforms • Experience with fuzzing, symbolic execution, static analysis, dynamic analysis, or related vulnerability-discovery techniques • Strong programming ability in C/C++, Rust, Python, Go, or Java • Ability to communicate complex cybersecurity concepts clearly and precisely in writing • Experience within a recognised security research laboratory, academic research group, product-security team, or equivalent industry environment is highly valued • Conference publications or presentations at venues such as Black Hat, DEF CON, USENIX Security, IEEE S&P, ACM CCS, NDSS, or comparable events are highly valued • Contributions to established open-source security tools or recognised bug-bounty programmes are advantageous • Relevant advanced security certifications may also be considered • Work must be completed without using confidential or proprietary information belonging to any employer, client, institution, or other third party • H1-B and STEM OPT support is unavailable for this engagement

🏖️ Benefits

• Fully remote independent contractor engagement • Flexible scheduling based on project requirements • Engagements may be extended, shortened, or concluded based on project needs and performance • Strong contributors may be considered for additional cybersecurity evaluation projects