Exploit Developer

CoreTech Security Services; Cheltenham; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Annual bonus

Pension 8% employer contribution

Private medical cover

Relocation assistance

Cycle-to-work scheme

Training and development

Company events

Job summary

CoreTech Security Services in Cheltenham is seeking an experienced Exploit Developer to join our vulnerability research team. You will work on bespoke products and research for UK cyber security clients, applying low-level exploitation and reverse engineering skills.

The role requires deep technical capability, problem-solving mindset, and the ability to document findings clearly. You will collaborate with top engineers and contribute to tooling and methodologies.

Qualifications

• Experience in vulnerability research and exploit development.
• Familiarity with disassembly tools such as IDA Pro or Ghidra.
• Experience documenting complex findings clearly.
• Active DV clearance is required.

Responsibilities

• Developing capability and exploits across architectures.
• Analyzing and defeating mitigation techniques.
• Reverse engineering binaries.
• Designing and productising solutions with real-world impact.
• Growing team capabilities with novel tools and strategies.
• Collaborating with other developers and engineers.

Skills

Exploit development

Reverse engineering

C/C++/Assembly

Linux internals

DV clearance

ARM/AArch64/x86

Job description

Working for CoreTech as an Exploit Developer will see you join a world-class team of developers and researchers whose mission is to deliver bespoke products and research into the most interesting cyber security clients in the UK. CoreTech is looking for experienced candidates with a demonstrable background in exploit development to join our vulnerability research team. We deliver bespoke and innovative solutions which enable the operational needs of our clients. Our team is highly experienced, deeplytechnicaland has a rich history of blending rapid prototyping, securityresearchand software engineering skills. Having worked in the industry already you will understand exactly what is required to be successful in this role and what to expect. This role requires an inquisitive mindset and enthusiasm for solving the most difficult research tasks. Our exploit development team works closely with our vulnerability researchers to ensure that the impact of complex, low level vulnerabilities is fully realised.

Typical tasks may include

• Developing capability and exploits across a variety of architectures.
• Analysing and defeating existing and future mitigation techniques.
• Reverse engineering binaries.
• Designing and productising solutions with immediate real-world impact.
• Growing the team’s capabilities by developing novel tools and strategies.
• Working in tandem with other hugely talented developers and engineers.

What you’ll bring

• A passion for solving difficult and complex problems.
• The ability to thrive in the most technically challenging environments.
• Be well versed with the most recent advancements in the domain.
• Strong knowledge of vulnerability research.
• Knowledge of Reverse engineering in IDA Pro or Ghidra.
• Substantial knowledge of exploitation techniques and mitigations.
• Strong C/C++/Assembly development experience.
• In depth knowledge of one or more of ARM, AARCH64, x86, x64 and MIPS.
• Experience and knowledge of Linux and its internals.
• Experience and knowledge of Android or iOS and its internals.
• Experience in documenting and presenting complex technical findings in a clear and concise manner.
• Must hold active DV clearance.

We wouldn’t expect someone to be an expert in all these areas, however you should have experience covering some of these.

This role is ideally targeting candidates who have worked in the industry and have some commercial experience.

Work Benefits

• Promotions are based on technical excellence and reviewed regularly.
• 25 days holiday per year (with bank holidays on top), option to buy up to 5 days per year.
• Level up with an extra day of holiday per year, up to an extra 5 days, starting from 2 years’ service.
• We offer financial support to cover HMRC allowable costs of relocating if you’re moving to the area.
• Training and development opportunities to support your career aspirations
• O'Reilly books subscription which provides access to huge range of technical books
• Regular events including internal technical conferences, company socials and pizza-fuelled lunchtime seminars.
• Free seasonal fruit, tea, coffee, milk, squash and hot chocolate.

Health Benefits - Private medical including access to

• Private online GP, and a helpline to speak with various healthcare professionals.
• Physiotherapists, osteopaths or chiropractors for muscle, bone, and joint pain.
• Mental health - counselling, and specialist consultations and treatment with psychologists and cognitive behavioural therapists.
• Annual Health assessment.

Financial Benefits

• A company bonus scheme so that everybody is rewarded for company success. This is an annual award that is based on the company hitting its targeted forecast. We have achieved this every year to date.
• 8% company contribution to pension with no minimum requirement for employee contribution.
• Death in Service cover of 4x base salary.

Lifestyle Benefits

• Enhanced maternity/paternity/adoption leave: 12 weeks maternity leave at full pay as soon as you join, further enhanced to 20 weeks full pay from 2 years’ service. 2 weeks paternity leave at full pay as soon as you join, further enhanced to 4 weeks full pay from 2 years’ service.
• Enhanced cycle-to-work scheme including the ability to purchase a bike over £1,000 (e-bikes, specialist cycles and trikes allowed).

Salary

We reward staff based on technical excellence and not years of experience, so it’s important to us to speak with you to see which grade you would fit into - it’s not always obvious from a CV! Your interviewer will spend time during your first interview speaking with you about how your skills and experience map against our grades, and discuss a salary band so that you know early what you can expect if you receive an offer from us. The technical interview will provide a deeper assessment of your skills against your mapped grade which ultimately determines whether you receive an offer and the exact salary.

Location

We are based in the centre of Cheltenham in a stunning new build contemporary office, 5 minutes walk from the local shops and cafes.

Additional Details

Our interview process is quick and to the point: if you look like a good fit for the role, we’ll schedule a brief call to discuss it in more detail and answer any questions you may have. If that goes well, we’ll arrange a technical interview to understand your level of experience. We aim to get back to you with an answer within a couple of days of the technical interview.

Please note, due to sensitivity of the role, successful applicants must hold an active Developed Vetting security clearance.

If you’re looking for a challenging role where you can make a real impact in the world, in a friendly environment and with all the support to advance your career.