Lead Fuzzing Security Engineer (Hybrid)

Camwebdir

United Kingdom

Hybrid

GBP 90,000 - 140,000

Full time

13 days ago

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Job summary

Arm is seeking a Principal Security Engineer specialising in fuzzing to own and evolve a coverage-guided fuzzing program. You will craft high-performance fuzzing harnesses, expand seed corpora, and build custom sanitizers to push code coverage and resilience. Strong debugging, scripting, and collaboration with product teams are essential.

Hybrid working model; you will drive CVE-level findings to remediation and contribute to security postures across services and protocols.

Qualifications

Experience in coverage-guided fuzzing for security testing.
Strong programming in C/C++ with Python for automation.
Ability to triage crashes and reproduce issues.
Familiarity with fuzzing infrastructure at scale.

Responsibilities

Map and prioritise fuzzing surfaces across services and protocols; maintain a living risk-based roadmap.
Design, build, and extend fuzzing harnesses with libFuzzer, AFL++, or Honggfuzz.
Grow seed corpus and apply targeted mutation strategies to improve coverage.
Automate crash triage and root-cause analysis; distinguish exploitable bugs from faults.
Develop custom sanitizers to expose missed bug classes.
Validate fixes and guard against regressions via differential fuzzing.
Assess disclosures to refine fuzzing detectability and harness coverage.
Document findings and share insights with engineering teams.