Principal Vulnerability Researcher

Prattwhitney; Gloucester; Hybrid; GBP 65,000 - 110,000; Full time

Job summary

RTX is seeking a Vulnerability Researcher for its UK Cyber Research Group in Gloucester. You will perform hardware and software teardowns, reverse engineering, and detailed analysis to identify security weaknesses and potential exploits, while developing bespoke tools.

You'll collaborate with multidisciplinary teams, document findings clearly, and support business development with technical briefings. Must hold SC clearance and be able to gain eDV clearance. 3 days in the Gloucester office.

Qualifications

• Proficiency in at least one programming language (C, C++, Python).
• Familiarity with assembly language (reading or writing).
• Experience in reverse engineering using tools such as IDA Pro, Ghidra, or Binary Ninja.
• Strong knowledge of Linux‑based systems, including command‑line tools and system configuration.
• Demonstrated analytical and problem‑solving skills with a methodical approach.
• Solid understanding of network protocols.

Responsibilities

• Perform hardware and software teardowns, characterisation, and reverse engineering.
• Conduct detailed analysis of platforms to identify security weaknesses, bugs, and potential exploits.
• Examine network protocols and system behaviours to uncover vulnerabilities.
• Collaborate with cross‑functional teams to deliver innovative technical solutions and research outcomes.
• Produce clear, structured documentation of findings, methodologies, and recommendations for both internal and external stakeholders.
• Support business development efforts, including proposal writing and technical briefings.

Skills

C/C++

Python

Reverse engineering

Linux

Network protocols

Tools

IDA Pro

Ghidra

Binary Ninja

Job description

About RTX

At RTX, the world's largest aerospace and defense company, 185,000 great minds are united by purpose and inspired to make a difference solving the world’s most complex problems. With our three market‑leading businesses, world‑class operations and investments in research and development, we offer capabilities and opportunity no one else can. Together, we push the boundaries of known science and find new ways to connect and protect our world. Raytheon brings the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today’s mission and stay ahead of tomorrow’s threat. We deliver solutions that help our nation and allies defend freedoms and deter aggression, creating a safer, more secure world. Join us and help shape the future of aerospace and defense.

Location: Gloucester, South Gloucestershire.

Hybrid role – 3 days a week in the Gloucester office or customer sites.

Role Overview

Raytheon UK’s Cyber Research Group (CRG) is seeking a highly skilled and analytically driven Vulnerability Researcher to support advanced research and development initiatives. The successful candidate will conduct in‑depth technical investigations across hardware and software systems to identify security vulnerabilities, develop bespoke tools, and contribute to the discovery and analysis of emerging threats. This role requires a strong technical foundation, problem‑solving ability, and the capacity to work collaboratively within multidisciplinary teams. Must already hold SC clearance & be able to gain an eDV clearance.

Key Responsibilities

• Perform hardware and software teardowns, characterisation, and reverse engineering.
• Conduct detailed analysis of platforms to identify security weaknesses, bugs, and potential exploits.
• Examine network protocols and system behaviours to uncover vulnerabilities.
• Collaborate with cross‑functional teams to deliver innovative technical solutions and research outcomes.
• Produce clear, structured documentation of findings, methodologies, and recommendations for both internal and external stakeholders.
• Support business development efforts, including proposal writing and technical briefings.

Essential Skills and Experience

• Proficiency in at least one programming language (C, C++, Python).
• Familiarity with assembly language (reading or writing).
• Experience in reverse engineering using tools such as IDA Pro, Ghidra, or Binary Ninja.
• Strong knowledge of Linux‑based systems, including command‑line tools and system configuration.
• Demonstrated analytical and problem‑solving skills, with a methodical and inquisitive approach to technical challenges.
• Solid understanding of network protocols.
• Ability to rapidly learn and adapt to new technologies and domains.
• Proven track record of identifying, analysing, and reporting vulnerabilities in complex systems.

Desirable Experience

• Experience using or developing fuzzers.
• Practical experience emulating hardware platforms with QEMU or similar tools to support security research and analysis.
• Embedded software development for platforms such as ARM Cortex, AVR, or MIPS.
• Familiarity with Radio Frequency (RF) systems and Software Defined Radios (SDRs), including 2G/4G/5G technologies and tools such as GNU Radio, Osmocom, srsRAN, or USRP.
• Network engineering experience (professional or home lab).
• Hardware development and prototyping, including PCB design and microcontroller programming.

RTX adheres to the principles of equal employment. All qualified applications will be given careful consideration without regard to ethnicity, color, religion, gender, sexual orientation or identity, national origin, age, disability, protected veteran status or any other characteristic protected by law.

Company Overview

RTX is an aerospace and defense company that provides advanced systems and services for commercial, military and government customers worldwide. It comprises three industry‑leading businesses – Collins Aerospace, Pratt & Whitney, and Raytheon. Its 195,000 employees enable the company to operate at the edge of known science as they imagine and deliver solutions that push the boundaries in quantum physics, electric propulsion, directed energy, hypersonics, avionics and cybersecurity. The company, formed in 2020 through the combination of Raytheon Company and the United Technologies Corporation aerospace businesses, is headquartered in Arlington, Virginia.