شرح موقعیت
Role: Security Researcher (Remote) Location: Remote (Work from Anywhere) Job Type: Full-Time Payout: $400K - $800K/yr Role Overview: We are hiring for one of our clients, seeking a Member of Technical Staff, Vulnerability Researcher to work on a full-time basis. The role involves identifying and analyzing software vulnerabilities across critical systems, with a focus on high-impact security research and mitigation strategies. The position requires deep technical expertise in vulnerability discovery and exploitation techniques to enhance system defenses. Key Required Skills & More About the Opportunity: This role offers a unique opportunity to work with a global leader in the Technology, Information and Internet industry, contributing to the development of secure-by-design software systems. The position plays a critical role in shaping the security posture of products used by millions worldwide. Equal Opportunity Employer: We hire based on skills and expertise. All qualified candidates are welcome regardless of background, experience, or prior employment history. Applications are reviewed solely on demonstrated technical ability and qualifications. Apply Now!
مسئولیتها
- Conduct advanced vulnerability research and analysis across codebases, APIs, and infrastructure components.
- Develop proof-of-concept exploits to validate identified vulnerabilities and assess their impact.
- Collaborate with engineering teams to design and implement security patches and mitigations.
- Stay current with emerging threats, attack vectors, and security trends in the vulnerability landscape.
- Document findings in technical reports and present recommendations to stakeholders.
نیازمندیها
- Proficiency in programming languages such as C, C++, Python, or Go for vulnerability analysis.
- Experience with reverse engineering tools like IDA Pro, Ghidra, or Binary Ninja.
- Knowledge of common vulnerability classes including buffer overflows, race conditions, and logic flaws.
- Familiarity with fuzzing frameworks like AFL, LibFuzzer, or Honggfuzz.
- Understanding of operating systems internals (Linux/Windows) and memory corruption techniques.
- Ability to analyze network protocols and identify security weaknesses in communication systems.
- Experience with static and dynamic analysis tools such as Coverity, Fortify, or Valgrind.
- Strong written and verbal communication skills for technical documentation and reporting.