Vulnerability Researcher

Raytheon Systems; Gloucester; Hybrid; GBP 40,000 - 60,000; Full time

Job summary

A leading defense technology firm in Gloucester is seeking a Vulnerability Researcher to conduct hardware analysis and support advanced research projects. The role involves hardware teardowns, data extraction, and collaborative technical solutions. Ideal candidates have strong hardware prototyping skills and are eligible for eDV clearance. Competitive salary and flexible working options are offered.

Benefits

Competitive salary

Flexible working options

25 days holiday

Contributory Pension Scheme

Company bonus scheme

Enhanced family friendly policies

Qualifications

• Eligible for or hold active eDV clearance.
• Demonstrated analytical and problem-solving capabilities.
• Basic understanding of side channel attack techniques.

Responsibilities

• Conduct hardware teardowns and reverse engineering.
• Design and implement rapid prototypes.
• Document findings for stakeholders.

Skills

Hardware development and prototyping

Data extraction from flash storage ICs

Familiarity with logic analysers and oscilloscopes

Advanced soldering and desoldering

Proficiency in C/C++ or Python

Good knowledge of Linux-based systems

Tools

IDA Pro

Ghidra

Binary Ninja

Job description

Overview

Raytheon UK's Cyber Research Group (CRG) is seeking a technically proficient and analytically minded Vulnerability Researcher with experience in hardware analysis to support advanced research and development activities.

As Vulnerability Researcher, you will conduct in-depth technical investigations, developing prototypes, and contributing to the discovery and analysis of emerging threats and vulnerabilities.

This role will be based in our Gloucester office or customer site on a hybrid basis (average of 2 days per week). You must be eligible for or already hold eDV clearance.

Responsibilities

• Hardware teardowns, characterisations and reverse engineering.
• Extract and recover data from flash memory including NAND, eMMC and SPI.
• Conduct side channel attacks such as timing attacks, voltage glitching and power analysis.
• Design and implement hardware/software rapid prototypes to explore novel cyber capabilities and concepts.
• Analyse network protocols and system behaviours to identify potential security weaknesses.
• Collaborate with multidisciplinary teams to deliver technical solutions and research outcomes.
• Document findings and methodologies in a clear and structured manner for internal and external stakeholders.

Essential Skills and Experience

• Hardware development and prototyping, including PCB design and microcontroller programming.
• Experience extracting data from flash storage ICs.
• Familiarity with logic analysers and oscilloscopes.
• Advanced soldering and desoldering experience.
• Basic understanding of side channel attack techniques. (experience not required)
• Proficiency in at least one programming language such as C, C++, or Python.
• Good working knowledge of Linux-based systems, including command-line tools and system configuration.
• Demonstrated analytical and problem-solving capabilities, with a methodical and inquisitive approach to technical challenges.
• Eligible for or hold active eDV clearance

Desirable Experience

• Reverse engineering using tools such as IDA Pro, Ghidra, or Binary Ninja.
• Vulnerability research, including exploit development and mitigation bypass techniques.
• Embedded software development for platforms such as ARM Cortex, AVR, or MIPS.
• Experience with Radio Frequency (RF) systems, Software Defined Radios (SDRs), 2G/4G/5G, including tools like GNU Radio, Osmocom, srsRAN or USRP.
• Network engineering experience either home lab or professional.

Benefits and Work Culture

• Competitive salary
• 37hr working week, with an early finish Friday - start your weekend early!
• Informal and formal flexible working possible - please enquire or highlight any requests to our Talent Acquisition team to explore the flexible working possibilities.
• 25 days holiday (increasing by up to 2 days with service), plus public holidays, opportunity to buy / sell / roll over up to 5 days, and up to 5 days volunteering annually.
• Contributory Pension Scheme (up to 10.5% company contribution)
• Company bonus scheme (discretionary).
• 6 times salary 'Life Assurance' with pension.
• Flexible Benefits scheme with extensive salary sacrifice schemes, including Health Cashplan, Dental, and Cycle to Work amongst others.
• Enhanced sick pay.
• Enhanced family friendly policies including enhanced maternity, paternity & shared parental leave.

Raytheon UK is a leader in defence and aerospace technology. As an employer, we are dedicated to fuelling innovation, nurturing talent, and fostering a culture of excellence. Joining our team means being part of an organisation that shapes the future of national security whilst investing in your growth and personal development. We provide a collaborative environment, abundant opportunities for professional development, and a sense of purpose in what we do. We are building a community committed to safeguarding a safer and more connected world.

RTX - Raytheon UK is a landed company and part of the wider RTX organisation. Headquartered in Arlington, Virginia, USA, with over 180,000 employees globally across every continent, RTX provides advanced systems and services for commercial, military and government customers worldwide and comprises three industry-leading businesses - Collins Aerospace Systems, Pratt & Whitney, and Raytheon. Supporting over 35,000 jobs across 13 UK sites, RTX contributes to the UK economy and partners with thousands of suppliers. RTX is investing across the country and creating opportunities in England, Scotland, Wales and Northern Ireland.

#LI-AS3

RTX adheres to the principles of equal employment. All qualified applications will be given careful consideration without regard to ethnicity, color, religion, gender, sexual orientation or identity, national origin, age, disability, protected veteran status or any other characteristic protected by law.

Privacy Policy and Terms: Please read the Policy and Terms on our site.