Vulnerability Researcher (Remote)

Hire Feed; France; Sur place; EUR 90 000 - 120 000; Plein temps

Résumé du poste

Hire Feed is seeking a Member of Technical Staff, Vulnerability Researcher to conduct deep technical analysis identifying software vulnerabilities across systems and applications in France. The role involves reverse engineering, code analysis, threat modeling, and collaboration with engineering teams.

You will produce clear technical reports for stakeholders, research emerging threats, and help drive secure development practices within a global technology leader.

Qualifications

• Proficiency in programming languages such as C, C++, Python, or Go for vulnerability analysis and exploitation.
• Experience with reverse engineering tools like IDA Pro, Ghidra, or Binary Ninja.
• Knowledge of common vulnerability types, including buffer overflows, race conditions, and injection flaws.
• Familiarity with network protocols, operating systems internals, and memory corruption techniques.
• Hands-on experience with fuzzing tools like AFL, LibFuzzer, or Honggfuzz.
• Understanding of secure coding practices and secure development lifecycle methodologies.
• Ability to produce clear, technical reports for stakeholders at varying levels of expertise.

Responsabilités

• Perform static and dynamic analysis of software to detect vulnerabilities in codebases and infrastructure.
• Develop proof-of-concept exploits to validate identified vulnerabilities and assess their impact.
• Collaborate with engineering teams to triage and prioritize security findings for remediation.
• Research emerging threats, attack vectors, and zero-day vulnerabilities in relevant technologies.
• Document findings, including technical details, risk assessments, and mitigation recommendations.

Connaissances

C

C++

Python

Go

Reverse engineering

Threat modeling

Reporting

Outils

IDA Pro

Ghidra

Binary Ninja

Description du poste

We are hiring for one of our clients, seeking a Member of Technical Staff, Vulnerability Researcher to work on a full-time basis. The role involves conducting deep technical analysis to identify software vulnerabilities across systems and applications. Responsibilities include reverse engineering, code analysis, and threat modeling to assess potential security risks.

Key Responsibilities:

• Perform static and dynamic analysis of software to detect vulnerabilities in codebases and infrastructure.
• Develop proof-of-concept exploits to validate identified vulnerabilities and assess their impact.
• Collaborate with engineering teams to triage and prioritize security findings for remediation.
• Research emerging threats, attack vectors, and zero-day vulnerabilities in relevant technologies.
• Document findings, including technical details, risk assessments, and mitigation recommendations.

Required Skills & Qualifications:

• Proficiency in programming languages such as C, C++, Python, or Go for vulnerability analysis and exploitation.
• Experience with reverse engineering tools like IDA Pro, Ghidra, or Binary Ninja.
• Knowledge of common vulnerability types, including buffer overflows, race conditions, and injection flaws.
• Familiarity with network protocols, operating systems internals, and memory corruption techniques.
• Hands-on experience with fuzzing tools like AFL, LibFuzzer, or Honggfuzz.
• Understanding of secure coding practices and secure development lifecycle methodologies.
• Ability to produce clear, technical reports for stakeholders at varying levels of expertise.

More About the Opportunity:

This role offers a unique opportunity to work with a global leader in the Technology, Information and Internet industry, contributing to enhanced security posture and risk mitigation for critical systems. The position involves direct collaboration with cross-functional teams to drive improvements in security architecture and incident response.

Equal Opportunity Employer:

We hire based on skills and expertise. All qualified candidates are welcome regardless of background, experience, or prior employment history. Applications are reviewed solely on demonstrated technical ability and qualifications.