- Pengalaman
- Setiap
- Gaji
- USD 240,000 – USD 400,000 / year
- Lowongan
- 1
- Diposting
- 5 jam yang lalu
- Mode kerja
- Bekerja dari rumah
- Melanjutkan
- Wajib mendaftar
Deskripsi pekerjaan
Role Overview
We are recruiting a Vulnerability Researcher for a full-time remote position. This role focuses on in-depth technical investigation to discover software vulnerabilities across various systems and applications. Key activities include reverse engineering, code analysis, and threat modeling to assess and mitigate security risks.
Main Responsibilities
- Conduct both static and dynamic software analysis to identify vulnerabilities within codebases and infrastructure.
- Create proof-of-concept exploits to validate vulnerabilities and evaluate their potential impact.
- Collaborate closely with engineering teams to prioritize and manage remediation of security issues.
- Investigate new threats, attack methodologies, and zero-day vulnerabilities related to relevant technological domains.
- Produce detailed documentation covering technical findings, risk evaluations, and recommended mitigations.
Required Qualifications and Skills
- Strong programming skills in languages such as C, C++, Python, or Go, applicable to vulnerability assessment and exploit development.
- Experience using reverse engineering software tools including IDA Pro, Ghidra, or Binary Ninja.
- Understanding of typical vulnerability categories like buffer overflows, race conditions, and injection attacks.
- Familiarity with network protocols, operating system internals, and memory corruption concepts.
- Hands-on practice with fuzzing frameworks like AFL, LibFuzzer, or Honggfuzz.
- Knowledge of secure coding standards and secure software development lifecycle principles.
- Capability to generate clear and technical reports tailored for diverse stakeholder audiences.
Additional Information
This position is offered by a global leader in the Technology, Information, and Internet sectors. The role presents an excellent opportunity to impact security strategy and risk reduction for critical systems worldwide. The successful candidate will engage directly with multidisciplinary teams to enhance security frameworks and incident response processes.
Equal Employment Opportunity
The employer is committed to hiring based on merit and expertise, welcoming applications from all qualified individuals regardless of background or previous employment.