
Vulnerability Research Engineer
Bugcrowd
full-time
Posted on:
Location Type: Remote
Location: Alabama • Massachusetts • United States
Visit company websiteExplore more
Salary
💰 $154,800 - $193,500 per year
Tech Stack
About the role
- Focus on end-to-end exploit development for real-world targets.
- Design, develop, and validate novel vulnerability discovery and exploitation capabilities against complex software and systems.
- Work at the operating system, binary, and micro-architectural levels, emphasizing creating new technical capabilities.
- Comfort operating with minimal supervision, incomplete problem definitions, and delayed feedback.
Requirements
- Design, develop, and validate novel vulnerability discovery and exploitation capabilities.
- Conduct expert reverse engineering of binaries (x86-64, ARM64, etc.) using industry-standard tools.
- Identify and exploit real-world vulnerabilities such as Use-after-free, Type confusion, Integer truncation, and Buffer overflow.
- Demonstrate ability to discover new, novel vulnerabilities in complex systems.
- Rapidly understand current vulnerability research and apply findings to identify new instances of vulnerability classes.
- Employ both manual analysis and automated techniques (e.g., fuzzing) for vulnerability discovery.
- Code and debug complex functions in C, Python, and Assembly (x86-64, ARM, etc.).
- Independently manage and execute research objectives, including scoping, research, experimentation, validation, and iteration.
- Travel to customer sites as required.
- Perform on-site for extended periods of time.
- TS/SCI clearance required (inactive SCI acceptable if SCI-clearable).
Benefits
- Bonuses
- Discretionary bonus program or commission plan
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
exploit developmentvulnerability discoveryreverse engineeringbinary analysisC programmingPython programmingAssembly programmingfuzzingmanual analysisautomated techniques
Soft skills
independent managementproblem-solvingadaptabilityself-motivationresearch skillscommunicationexperimentationvalidationiterationtime management
Certifications
TS/SCI clearanceinactive SCI acceptable