Vulnerability Researcher

Stack

Responsibilities

• ▹Conduct thorough research to discover and analyze new security vulnerabilities within the area of expertise, including memory corruption, sandbox escapes, privilege escalation, and code execution vulnerabilities
• ▹Develop proof-of-concept exploits to demonstrate the impact of discovered vulnerabilities and collaborate with the development team to create effective patches
• ▹Utilize advanced tools and techniques for static and dynamic analysis, fuzzing, and manual code reviews
• ▹Maintain detailed documentation of research methodologies, findings, and vulnerability reports
• ▹Stay up-to-date with the latest trends, tools, and techniques in vulnerability research and security

Requirements

• ▹No formal education or experience required, but must demonstrate previously found and exploited vulnerabilities in one of: Windows kernel, Android application security, Linux kernel, or modern web browsers (Chrome, Firefox, Safari, Edge)
• ▹Deep understanding of the chosen specialization area(s) and underlying architectures
• ▹Proficiency in relevant programming languages such as C/C++, Java/Kotlin (for Android), and scripting languages such as Python
• ▹Experience with reverse engineering tools, debuggers, and fuzzing frameworks (e.g., AFL, LibFuzzer, syzkaller)
• ▹Familiarity with common security vulnerabilities (e.g., buffer overflow, use-after-free, type confusion, integer overflow) and exploitation techniques
• ▹Knowledge of modern security features and mitigations

Soft skills

About the company

Searchlight Cyber was founded in 2017 with a mission to stop threat actors from acting with impunity. Its External Cyber Risk Management Platform helps organizations identify and protect themselves from threats emerging from the cybercriminal underground, with Attack Surface Management and Threat Intelligence tools. It is used by some of the world's largest enterprises, government and law enforcement agencies, and Managed Security Service Providers.