Senior Vulnerability Researcher

🔥 17 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

VulnCheck

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2021

🔒 Cybersecurity

🤖 Artificial Intelligence

🏢 Enterprise

Cybersecurity • Artificial Intelligence • Enterprise

VulnCheck is a next-generation Cyber Threat Intelligence platform that offers businesses unprecedented visibility into the vulnerability ecosystem. It prioritizes and monitors vulnerabilities, exploit proofs-of-concept, and threat actor activities, helping organizations better defend against cyber threats. Through unique early access to vulnerability information and real-time alerting, VulnCheck enables proactive measures against evolving cyber threats, thereby strengthening the overall security posture of its clients.

📋 Description

• Conduct vulnerability research to identify net-new vulnerabilities across a range of operating systems, platforms, and devices • Reverse engineer a variety of firmware and software • Author original exploits, network rules (Suricata / Snort), and other artifacts such as Docker containers, version scanners, and ASM queries to accompany new vulnerability finds • Apply and expand agentic approaches to scale vulnerability discovery and exploit development • Work with a seasoned team of hackers and threat researchers to find and weaponize new vulnerabilities before adversaries do • Drive original research from exposure analysis and reverse engineering through vulnerability discovery and weaponized exploit development

🎯 Requirements

• 5+ years of full-time vulnerability research experience, including experience targeting networking device firmware, embedded Linux/RTOS-based systems, and/or network protocols • Demonstrable experience with agentic approaches to vulnerability discovery and exploit development • Experience developing original (weaponized) exploit code • Comfort acquiring, unpacking, and analyzing target firmware and appliances, including reasoning about network protocols and unauthenticated attack surface • Familiarity with embedded architectures (MIPS, ARM) and firmware extraction/unpacking (e.g., binwalk) • Experience with dynamic analysis and debugging on embedded/emulated targets (e.g., QEMU) • Working knowledge of common networking protocols (TCP/IP, routing protocols, VPN protocols such as IPsec/SSL-VPN, SNMP, etc.) • Strong reverse engineering skills, including static and dynamic analysis of compiled binaries and firmware (VulnCheck uses Ghidra for reversing) • Strong command of memory corruption and other vulnerability classes (e.g., stack and heap overflows, use-after-free, type confusion, integer errors, command and path injection, authentication and logic flaws) • Solid working knowledge of C/C++ and at least one scripting language (e.g., Python) • Experience working on technical projects remotely, alone, and on small teams • Employment may require authorization to access technology subject to U.S. export control regulations, sanctions, and other applicable legal or contractual requirements

🏖️ Benefits

• Generous, flexible time off • Retirement/pension plan contributions (e.g., 401k with match in the US; local pension schemes elsewhere) • Comprehensive healthcare coverage • Generous paid parental leave • Remote-friendly environment with flexibility • Support for home office costs (phone & internet)