Senior Cloud Security Researcher — London (In-Office)

CoreLatency; Greater London; Hybrid; GBP 70,000 - 120,000; Full time

Job summary

CoreLatency is seeking a Security Researcher to identify vulnerabilities and challenge security boundaries across its cloud infrastructure in London. The role involves testing, reasoning about complex systems, and direct communication with engineers.

Independent work style and a focus on practical security improvements are valued. The candidate should demonstrate capability beyond certifications, with hands-on research into hypervisor escapes, VM isolation, Linux security, and APIs.

Qualifications

• Perform penetration testing and adversarial security research across cloud infrastructure.

Responsibilities

• Conduct penetration testing and adversarial security research across cloud infrastructure.
• Investigate hypervisor escapes, VM isolation weaknesses and cross-tenant vulnerabilities.
• Assess Linux hosts, container environments, network isolation and management interfaces.
• Test authentication, authorisation, APIs and customer-facing applications.
• Research vulnerabilities in open-source components and infrastructure software.
• Develop proofs of concept demonstrating security weaknesses.
• Conduct threat modelling and review infrastructure architecture.
• Evaluate security risks arising from AI agents, automated execution and LLM integrations.
• Document findings, assess impact and work with engineering to implement fixes.
• Support vulnerability disclosure and bug bounty triage.

Skills

Penetration testing

Adversarial security research

Vulnerability assessment

Threat modelling

Documentation

Linux security

Communication with engineers

Education

Bachelor's degree in CS or related field

Offensive-security certification (OSCP/OSEP)

Tools

KVM

QEMU

Firecracker

Kubernetes security

Cilium

LLM security

Fuzzing

Exploit development

Job description

CoreLatency is seeking a Security Researcher to identify vulnerabilities and challenge security boundaries across its cloud infrastructure in London. The role involves testing, reasoning about complex systems, and direct communication with engineers.

Independent work style and a focus on practical security improvements are valued. The candidate should demonstrate capability beyond certifications, with hands-on research into hypervisor escapes, VM isolation, Linux security, and APIs.