Senior Vulnerability Researcher

National Physical Laboratory; Metropolitan Borough of Solihull; On-site; GBP 65,000 - 85,000; Full time

Job summary

A leading research organization in the UK is seeking a Senior Vulnerability Researcher to lead cutting-edge vulnerability research activities. The role involves setting the technical direction for a talented team and tackling complex security challenges. Ideal candidates will have deep expertise in telecom technology and experience with vulnerability research. Flexible working options are available to ensure a great work-life balance.

Qualifications

• Strong background in vulnerability research.
• Deep understanding of hardware and software development lifecycles.
• Experience with cryptographic algorithms for encryption.

Responsibilities

• Lead and drive vulnerability research initiatives.
• Set technical vision and strategy for the vulnerability team.
• Apply expertise to solve security problems in telecom.

Skills

Vulnerability research

Telecoms technology

Cryptographic algorithms

Linux internals

Reverse engineering

Tools

IDA Pro

Ghidra

GDB

Job description

Overview

Are you ready to shape the future of security research? As a Senior Vulnerability Researcher, you’ll take charge of cutting-edge vulnerability research activities—whether through your deep technical expertise or your broad knowledge across domains. You’ll set the technical direction for a talented team, guiding them to uncover and understand the most complex security challenges.

What you'll be doing

• Leading and driving vulnerability research initiatives.
• Setting the technical vision and strategy for the vulnerability team.
• Applying your expertise to solve real-world security problems across Telecom's hardware, software, and systems.

Successful Applicants must be able to commute to the UKTL offices in Birmingham at least twice a week.

We strive to offer a great work life balance - if you are looking for full time, part time or flexible options, we will try to make this work where business possible. This will be dependent on the kind of role you do and part of the business you work in.

What you bring

• A strong background in multiple vulnerability research roles or organisations.
• Through knowledge of telecoms tech, e.g.: 4G/5G, Future fibre broadband, OpenRAN.
• Deep understanding of hardware and software development lifecycles—and how they impact security.
• Practical experience with cryptographic algorithms for encryption, authentication, and digital signatures.
• Solid grasp of data structures, distributed systems, virtualisation, and containerisation technologies.
• Expertise in network protocols and software internals—from assembly to interpreted languages.
• Familiarity with embedded systems, operating systems, and hardware debugging techniques.
• Strong knowledge of Linux internals and the ability to pick up any programming language with the right resources.
• Reverse engineering skills using tools like IDA Pro or Ghidra.
• Proficiency with debuggers such as GDB.

Notes

Please note: Applications will be reviewed, and interviews conducted throughout the duration of this advert; therefore we may at any time bring the closing date forward. We encourage all interested applicants to apply as soon as practical.

We actively recruit citizens of all backgrounds, but the nature of our work in this specific area means that nationality, residency and security requirements are more tightly defined than others. To work in this role, you will need to have a DV clearance with no restrictions, or you must have the ability to obtain a DV clearance.