Vulnerability Researcher

Job not on LinkedIn

🕒 July 25

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👻 Ghost score 22%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Searchlight Inc

WebsiteLinkedInAll Job Openings

1 - 10 employees

📣 Marketing

Marketing

Searchlight Inc is in the business of building great companies by helping startups and established corporations find the most talented candidates in the marketplace. The company specializes in matching skilled professionals with client needs, focusing on fields such as sales, business development, marketing, and technology. With expertise in digital and emerging media, Searchlight delivers exceptional results for clients across various industries, particularly in advertising, professional services, and technology.

📋 Description

• Conduct thorough research to discover and analyze new security vulnerabilities within your area of expertise, including but not limited to memory corruption, sandboxing escapes, privilege escalation, and code execution vulnerabilities. • Develop proof-of-concept exploits to demonstrate the impact of discovered vulnerabilities, and collaborate with the development team to create effective patches. • Utilize advanced tools and techniques for static and dynamic analysis, fuzzing, and manual code reviews to uncover hidden security flaws. • Maintain detailed documentation of research methodologies, findings, and vulnerability reports, ensuring clarity and completeness. • Stay up-to-date with the latest trends, tools, and techniques in the field of vulnerability research and security across multiple platforms.

🎯 Requirements

• Must be able to demonstrate that you have previously found and exploited vulnerabilities in one or more of the following areas: Windows kernel vulnerabilities and exploitation • Android application security and exploitation • Linux kernel vulnerabilities and exploitation • Modern web browser vulnerabilities (Chrome, Firefox, Safari, Edge) • Deep understanding of chosen specialization area(s) and underlying architectures • Proficiency in relevant programming languages such as C/C++, Java/Kotlin (for Android), and scripting languages such as Python • Experience with reverse engineering tools, debuggers, and fuzzing frameworks (e.g., AFL, LibFuzzer, syzkaller) • Familiarity with common security vulnerabilities (e.g., buffer overflow, use-after-free, type confusions, integer overflows) and exploitation techniques • Knowledge of modern security features and mitigations such as sandboxing, ASLR, DEP, CFG, and SELinux/AppArmor. • Experience with operating system internals, memory management, and process/thread management. • Strong analytical and problem-solving skills. • Ability to work independently as well as in a collaborative environment. • Excellent written and verbal communication skills. • Attention to detail and a commitment to high-quality research.

🏖️ Benefits

• 25 days holiday plus bank holidays • Entry into company pension scheme • Private healthcare from Axa, including dental and vision coverage • We offer both TechScheme and Cycle2Work • Comprehensive training and support to develop your career, including a training budget • A range of office perks, including free fresh fruit daily, a bean to cup coffee machine and more • Regular team building and reward events