Senior Vulnerability Researcher

Stack

Responsibilities

• ▹Break into modern Android devices and other embedded targets, from smartphones to drones
• ▹Go after the full Android attack surface, from userland and the kernel down to firmware and silicon
• ▹Turn research into world-unique evidence-extraction capabilities
• ▹Get past hardware-backed encryption, secure boot chains, hardened security policies and trusted execution environments (TEE/eSE)

Requirements

• ▹Proven experience in vulnerability research and exploitation, ideally on mobile or other modern targets (Android, iOS, Linux, Windows, macOS)
• ▹Strong reverse engineering skills, mainly on ARM/ARM64 and sometimes more exotic architectures
• ▹Comfortable working across memory-corruption mitigations (PAC, MTE, CFI, KASLR and more)
• ▹Professional fluency in French (the team's working language) and English

Nice to have

• ▹Published research, CVEs or conference talks
• ▹Advanced fuzzing experience
• ▹Knowledge of cryptographic primitives and their weaknesses
• ▹Offensive hardware research and board design
• ▹CTF experience
• ▹AI-assisted vulnerability research and agentic workflows
• ▹Ability or willingness to grow into leading people

Soft skills

What we offer

• ▹Fully remote from France or Europe
• ▹Trust and autonomy to go deep on hard subjects
• ▹Small, close-knit research team

About the company

Cellebrite (Nasdaq: CLBT) provides digital investigation and intelligence gathering solutions that let customers lawfully access, collect, analyze and share digital evidence. Thousands of public safety organizations, intelligence agencies and businesses use it via cloud, on-premises and hybrid deployments.