Security Researcher, Offensive Security

CoreLatency; Greater London; Hybrid; GBP 70,000 - 120,000; Full time

Job summary

CoreLatency is seeking a Security Researcher to identify vulnerabilities and challenge security boundaries across its cloud infrastructure in London. The role involves testing, reasoning about complex systems, and direct communication with engineers.

Independent work style and a focus on practical security improvements are valued. The candidate should demonstrate capability beyond certifications, with hands-on research into hypervisor escapes, VM isolation, Linux security, and APIs.

Qualifications

• Perform penetration testing and adversarial security research across cloud infrastructure.

Responsibilities

• Conduct penetration testing and adversarial security research across cloud infrastructure.
• Investigate hypervisor escapes, VM isolation weaknesses and cross-tenant vulnerabilities.
• Assess Linux hosts, container environments, network isolation and management interfaces.
• Test authentication, authorisation, APIs and customer-facing applications.
• Research vulnerabilities in open-source components and infrastructure software.
• Develop proofs of concept demonstrating security weaknesses.
• Conduct threat modelling and review infrastructure architecture.
• Evaluate security risks arising from AI agents, automated execution and LLM integrations.
• Document findings, assess impact and work with engineering to implement fixes.
• Support vulnerability disclosure and bug bounty triage.

Skills

Penetration testing

Adversarial security research

Vulnerability assessment

Threat modelling

Documentation

Linux security

Communication with engineers

Education

Bachelor's degree in CS or related field

Offensive-security certification (OSCP/OSEP)

Tools

KVM

QEMU

Firecracker

Kubernetes security

Cilium

LLM security

Fuzzing

Exploit development

Job description

Job ID: Role#3 · Location: London · Team: Technology · Level: Experienced professional · WFO: In office

CoreLatency is building a high-performance cloud infrastructure platform specialising in dedicated bare metal servers and rapidly provisioned virtual machines.

Our products include Bare Metal Cloud and Flash VMs, combining high-performance hardware, automated provisioning, virtualisation, software-defined networking and developer-focused APIs.

We are looking for a Security Researcher to identify vulnerabilities, challenge security boundaries and help secure our infrastructure against sophisticated attacks. Ideally you are a technically capable researcher who enjoys understanding how systems work and finding where their security assumptions break down.

You should be comfortable working independently, testing complex infrastructure and communicating directly with engineers.

We value demonstrated technical ability over certifications alone.

What we're looking for

• Conduct penetration testing and adversarial security research across our cloud infrastructure.
• Investigate hypervisor escapes, VM isolation weaknesses and cross-tenant vulnerabilities.
• Assess Linux hosts, container environments, network isolation and management interfaces.
• Test authentication, authorisation, APIs and customer-facing applications.
• Research vulnerabilities in open-source components and infrastructure software.
• Develop proofs of concept demonstrating security weaknesses.
• Conduct threat modelling and review infrastructure architecture.
• Evaluate security risks arising from AI agents, automated execution and LLM integrations.
• Document findings, assess impact and work with engineering to implement fixes.
• Support vulnerability disclosure and bug bounty triage.

Nice to have

• OSCP, OSEP, CREST CRT/CCT or equivalent offensive-security certification.
• Experience with KVM, QEMU, Firecracker or other virtualisation technologies.
• Knowledge of Linux namespaces, cgroups, seccomp, eBPF and kernel security.
• Experience with BGP, EVPN/VXLAN and software-defined networking.
• Familiarity with Kubernetes, container security and Cilium.
• Experience researching firmware, BMC/IPMI or bare metal provisioning vulnerabilities.
• Experience with vulnerability discovery, fuzzing or exploit development.
• Knowledge of LLM security, prompt injection and agentic tool-execution risks.
• Published security research, CVEs, conference presentations or recognised bug bounty findings.