Vulnerability Researcher

Job not on LinkedIn

🔥 2 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Searchlight Inc

WebsiteLinkedInAll Job Openings

1 - 10 employees

📣 Marketing

Marketing

Searchlight Inc is in the business of building great companies by helping startups and established corporations find the most talented candidates in the marketplace. The company specializes in matching skilled professionals with client needs, focusing on fields such as sales, business development, marketing, and technology. With expertise in digital and emerging media, Searchlight delivers exceptional results for clients across various industries, particularly in advertising, professional services, and technology.

📋 Description

• Conduct thorough research to discover and analyze new security vulnerabilities within your area of expertise, including but not limited to memory corruption, sandboxing escapes, privilege escalation, and code execution vulnerabilities. • Develop proof-of-concept exploits to demonstrate the impact of discovered vulnerabilities, and collaborate with the development team to create effective patches. • Utilize advanced tools and techniques for static and dynamic analysis, fuzzing, and manual code reviews to uncover hidden security flaws. • Maintain detailed documentation of research methodologies, findings, and vulnerability reports, ensuring clarity and completeness. • Stay up-to-date with the latest trends, tools, and techniques in the field of vulnerability research and security across multiple platforms.

🎯 Requirements

• Must be able to demonstrate that you have previously found and exploited vulnerabilities in one or more of the following areas: Windows kernel vulnerabilities and exploitation • Android application security and exploitation • Linux kernel vulnerabilities and exploitation • Modern web browser vulnerabilities (Chrome, Firefox, Safari, Edge) • Deep understanding of chosen specialization area(s) and underlying architectures • Proficiency in relevant programming languages such as C/C++, Java/Kotlin (for Android), and scripting languages such as Python • Experience with reverse engineering tools, debuggers, and fuzzing frameworks (e.g., AFL, LibFuzzer, syzkaller) • Familiarity with common security vulnerabilities (e.g., buffer overflow, use-after-free, type confusions, integer overflows) and exploitation techniques • Knowledge of modern security features and mitigations such as sandboxing, ASLR, DEP, CFG, and SELinux/AppArmor. • Experience with operating system internals, memory management, and process/thread management. • Strong analytical and problem-solving skills. • Ability to work independently as well as in a collaborative environment. • Excellent written and verbal communication skills. • Attention to detail and a commitment to high-quality research.

🏖️ Benefits

• 25 days holiday plus bank holidays • Entry into company pension scheme • Private healthcare from Axa, including dental and vision coverage • We offer both TechScheme and Cycle2Work • Comprehensive training and support to develop your career, including a training budget • A range of office perks, including free fresh fruit daily, a bean to cup coffee machine and more • Regular team building and reward events