Careers / Open position
Vulnerability Researcher
Original research and exploit development across software and devices.
Europe · Senior
Minimum certification: OSED
Role details
What you would do
- Find original vulnerabilities in widely used software and devices
- Build proof-of-concept exploits that demonstrate real impact
- Take findings through responsible disclosure to a published CVE
- Support client engagements that need reverse engineering or exploit work
Minimum requirements
- An earned OSED certification. Course attendance or a planned exam does not meet this requirement.
- Practical C/C++ and x86/x64 assembly skills, including memory corruption and exploit development.
- Confident reverse engineering and debugging with tools such as Ghidra, IDA, WinDbg or x64dbg.
- Ability to identify a root cause and produce a reliable proof of concept with clearly stated constraints.
- Own research you can explain: an advisory, CVE, technical write-up or a reproducible laboratory example; clear written English.
Additional strengths (optional)
- OSEE.
- Experience with firmware analysis, ARM, QEMU emulation or hardware-assisted research.
What to include in a technical application
Use the application link for the relevant role and email [email protected] with:
- The role you are applying for and a relevant CV.
- Your earned certifications, including the required one; add a public verification link where available.
- One or two examples of your own technical work: research, a write-up, an advisory, a tool or a laboratory demonstration.
- A short explanation of your contribution and the technical work you want to do.
Do not send client data or material covered by an NDA. A laboratory example is suitable when professional work is confidential.
Hiring process
How hiring works for this role
Eligibility review and introduction
We first review the required role-specific certification, relevant experience and work examples. Candidates who meet the minimum requirements are invited to an introductory conversation with a senior team member.
Technical session
Either a practical exercise or a walkthrough of work you have already done, such as a CVE, a write-up or a tool you built. We care about how you reason, not trick questions.
Meet the team
You meet the people you would work with day to day. We talk through real engagements, how the team operates and where you would fit.
Offer
If it is a match on both sides, we make you an offer and agree the details with you directly, including how and where you will work.
Apply for this role
Use the email button and include the application details above. Please do not share confidential client information.