Bugcrowd

Vulnerability Research Engineer

Bugcrowd

full-time

Posted on:

Location Type: Remote

Location: AlabamaMassachusettsUnited States

Visit company website

Explore more

AI Apply
Apply

Salary

💰 $154,800 - $193,500 per year

About the role

  • Focus on end-to-end exploit development for real-world targets.
  • Design, develop, and validate novel vulnerability discovery and exploitation capabilities against complex software and systems.
  • Work at the operating system, binary, and micro-architectural levels, emphasizing creating new technical capabilities.
  • Comfort operating with minimal supervision, incomplete problem definitions, and delayed feedback.

Requirements

  • Design, develop, and validate novel vulnerability discovery and exploitation capabilities.
  • Conduct expert reverse engineering of binaries (x86-64, ARM64, etc.) using industry-standard tools.
  • Identify and exploit real-world vulnerabilities such as Use-after-free, Type confusion, Integer truncation, and Buffer overflow.
  • Demonstrate ability to discover new, novel vulnerabilities in complex systems.
  • Rapidly understand current vulnerability research and apply findings to identify new instances of vulnerability classes.
  • Employ both manual analysis and automated techniques (e.g., fuzzing) for vulnerability discovery.
  • Code and debug complex functions in C, Python, and Assembly (x86-64, ARM, etc.).
  • Independently manage and execute research objectives, including scoping, research, experimentation, validation, and iteration.
  • Travel to customer sites as required.
  • Perform on-site for extended periods of time.
  • TS/SCI clearance required (inactive SCI acceptable if SCI-clearable).
Benefits
  • Bonuses
  • Discretionary bonus program or commission plan

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard skills
exploit developmentvulnerability discoveryreverse engineeringbinary analysisC programmingPython programmingAssembly programmingfuzzingmanual analysisautomated techniques
Soft skills
independent managementproblem-solvingadaptabilityself-motivationresearch skillscommunicationexperimentationvalidationiterationtime management
Certifications
TS/SCI clearanceinactive SCI acceptable