Senior Security Researcher

What you'll do

• Research and analyze in-the-wild exploits for various vulnerabilities across different platforms.
• Perform deep-dive reverse engineering to understand the inner workings of malicious code and exploits.
• Develop tools and scripts to automate exploit analysis tasks using static and dynamic frameworks.
• Create classification frameworks to attribute intrusion activity based on specific vulnerability characteristics.
• Develop host-based and network-based signatures for large-scale hunting, detection, and prevention.
• Produce high-quality threat intelligence reports including actionable mitigation and detection guidance.
• Deliver technical briefings to various audiences via phone, video conference, or in-person meetings.
• Leverage AI-assisted tools to accelerate vulnerability research and streamline analysis workflows.

What we're looking for

• Proficiency in exploitation techniques for userspace and kernel-level vulnerabilities is required.
• Knowledge of common network service exploitation techniques and standard web-based exploitation vectors is required.
• A solid understanding of at least two operating system platforms, including Microsoft Windows, is required.
• Profound knowledge of reverse engineering tools and processes, such as disassemblers, decompilers, and debuggers, is required.
• Knowledge of programming and scripting languages, particularly Python, is required.
• Ability to leverage Large Language Models (LLMs) and AI-assisted tools for vulnerability research and exploit analysis is required.
• Excellent technical writing skills and the ability to communicate complex concepts to various audiences are required.
• Experience in attribution, intelligence analysis, or writing Snort and YARA signatures is preferred.