Vulnerability Research Engineer

🕒 January 13

🏈 Alabama, Massachusetts, +1 more states – Remote

🏈 Alabama – Remote 🍂 Massachusetts – Remote 🔔 Pennsylvania – Remote

💵 $154.8k - $193.5k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

📚 Research Engineer

Apply Now

Find Similar Remote Jobs

Receive Emails For Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Bugcrowd

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2012

🔒 Cybersecurity

☁️ SaaS

🏢 Enterprise

💰 $30M Series D on 2020-04

Cybersecurity • SaaS • Enterprise

Bugcrowd is a leading platform that provides continuous security testing solutions, enabling organizations to stay ahead of cyberthreats. By leveraging a global community of trusted security researchers, Bugcrowd offers services such as penetration testing as a service, vulnerability disclosure, bug bounty programs, and attack surface management. The company assists industries such as financial services, healthcare, and technology in identifying and prioritizing vulnerabilities, ensuring proactive protection against potential cyber attacks. Driven by data and AI, Bugcrowd's comprehensive approach integrates seamlessly with existing systems to streamline the remediation of security issues, enhancing the overall security posture of its clients.

📋 Description

• Focus on end-to-end exploit development for real-world targets. • Design, develop, and validate novel vulnerability discovery and exploitation capabilities against complex software and systems. • Work at the operating system, binary, and micro-architectural levels, emphasizing creating new technical capabilities. • Comfort operating with minimal supervision, incomplete problem definitions, and delayed feedback.

🎯 Requirements

• Design, develop, and validate novel vulnerability discovery and exploitation capabilities. • Conduct expert reverse engineering of binaries (x86-64, ARM64, etc.) using industry-standard tools. • Identify and exploit real-world vulnerabilities such as Use-after-free, Type confusion, Integer truncation, and Buffer overflow. • Demonstrate ability to discover new, novel vulnerabilities in complex systems. • Rapidly understand current vulnerability research and apply findings to identify new instances of vulnerability classes. • Employ both manual analysis and automated techniques (e.g., fuzzing) for vulnerability discovery. • Code and debug complex functions in C, Python, and Assembly (x86-64, ARM, etc.). • Independently manage and execute research objectives, including scoping, research, experimentation, validation, and iteration. • Travel to customer sites as required. • Perform on-site for extended periods of time. • TS/SCI clearance required (inactive SCI acceptable if SCI-clearable).

🏖️ Benefits

• Bonuses • Discretionary bonus program or commission plan