Senior Vulnerability Research Leader

National Physical Laboratory (NPL); England; On-site; GBP 60,000 - 85,000; Full time

Benefits offered by this job

Competitive salary and benefits

Opportunities for training courses

Attendance at major international security conferences

Job summary

National Physical Laboratory (NPL) seeks a Principal Vulnerability Researcher to join their Vulnerability Research Team in Oxfordshire. This hands-on role involves security research on telecom devices such as routers and firewalls. Candidates should have extensive experience in security research, strong reverse engineering skills, and proficiency in programming languages like C/C++ and Python.

The position offers competitive salary, opportunities for growth, and participation in international security conferences.

Qualifications

• Extensive experience in security or vulnerability research.
• Strong reverse engineering skills using static and dynamic analysis.
• Efficient source code analysis on large codebases.
• Practical experience with fuzzing techniques.

Responsibilities

• Conduct vulnerability research against network and embedded devices.
• Reverse engineer firmware and binaries.
• Design and run fuzzing campaigns.
• Provide technical leadership and set research standards.
• Produce high-quality technical reports.

Skills

Security or vulnerability research

Reverse engineering

Source code analysis

Fuzzing techniques

Embedded systems understanding

Proficiency in C/C++

Scripting languages (Python, Lua)

Tools

Ghidra

Job description

National Physical Laboratory (NPL) seeks a Principal Vulnerability Researcher to join their Vulnerability Research Team in Oxfordshire. This hands-on role involves security research on telecom devices such as routers and firewalls. Candidates should have extensive experience in security research, strong reverse engineering skills, and proficiency in programming languages like C/C++ and Python.

The position offers competitive salary, opportunities for growth, and participation in international security conferences.