Vulnerability Researcher

National Physical Laboratory (NPL); Metropolitan Borough of Solihull; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

The National Physical Laboratory (NPL) is seeking a passionate telecom security researcher to explore vulnerabilities, create testing tools, and enhance telecom systems security. The role includes rigorous investigation into telecom networks and innovative tool development.

Candidates must be comfortable with network protocols, low-level programming, and cryptographic systems, and hold the ability to commute to the UKTL offices in Birmingham for collaboration.

Qualifications

• Passion for uncovering how systems work and break.
• Understanding of memory-corruption bugs and protections.
• Ability to program in multiple languages.

Responsibilities

• Explore unknown vulnerabilities in telecom systems.
• Build and test custom fuzzers and tools.
• Collaborate with peers in a world-class lab.

Skills

Telecom systems vulnerability research

Network protocols

Low-level programming

Cryptographic algorithms

Reverse engineering

Linux internals

Tools

IDA Pro

Ghidra

Ethical exploitation tools

Job description

About the Role

We are looking for a telecom security researcher to explore unknown vulnerabilities, design tools, and contribute to secure telecom systems.

What You’ll Be Doing

• Find new vulnerabilities in carrier‑grade telecom systems, conducting research‑led investigations.
• Innovate by building and testing custom fuzzers, software‑radio solutions, or new tools.
• Learn relentlessly by deepening understanding of telecom systems and collaborating with peers.
• Build and experiment in a world‑class lab, designing and evolving infrastructure for research.

About You

• Curious and driven, with a passion for uncovering how systems work and break.
• Understanding of network protocols, low‑level and high‑level programming, assembly, and interpreted languages.
• Knowledge of cryptographic algorithms, encryption, authentication, signatures, and how they can be misused.
• Comfortable with data structures, distributed systems, virtualization, and containerization.
• Experience with memory‑corruption bugs and bypassing protections like ASLR, stack canaries, and heap guards.
• Proficiency in Linux internals and ability to program in multiple languages.
• Experience with ethical exploitation tools, reverse engineering, IDA Pro, Ghidra, or source‑code analysis.

Requirements and Conditions

• Must commute to the UKTL offices in Birmingham at least twice a week.
• Requires DV clearance with no restrictions or the ability to obtain it.

Legal and Equality Statement

We actively recruit citizens of all backgrounds and adhere to diversity and equality of opportunity. All candidates meeting the required criteria will be considered for interview.