Application Security Researcher

InnoEdge Labs; Santo Niño 1st; Hybride; PHP 700 000 - 1 200 000; Plein temps

Avantages offerts par ce poste

Training & Development

Performance Bonus

Medical Benefits

Hybrid Work Arrangements

Résumé du poste

InnoEdge Labs in Singapore seeks a technically seasoned security researcher to lead analysis, reverse engineering, and tool development. You will mentor juniors, design experiments, and publish findings to strengthen cyber defense capabilities.

You will conduct in‑depth research on applications, verify security through tests, develop PoCs, and document methodologies for technical staff and executives. Hybrid work arrangements and medical benefits are provided.

Qualifications

• Proficiency in C++ and knowledge of common APIs and file formats.
• Experience reversing C/C++ binaries and identifying patterns.
• Familiarity with cryptographic concepts and security testing.

Responsabilités

• Lead research directions, mentor junior researchers, and design security tools.
• Conduct in-depth research, reverse engineer binaries, identify weaknesses.
• Develop PoCs and tools to demonstrate vulnerabilities and mitigations.
• Document findings and communicate strategy to stakeholders.
• Contribute to cybersecurity community through papers or talks.

Connaissances

C++

Windows APIs

Linux APIs

Encryption

Reverse engineering

Formation

Bachelor's degree in CS or related

Description du poste

At InnoEdge, we work with organisations to protect them from cyber threats. We help detect new unknown cyber threats through research, fortify networks, and defend critical information infrastructures. Based in Singapore, our team consists of cybersecurity experts who use the advanced techniques and technologies to deliver cutting-edge solutions and services.

InnoEdge believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries, and have a thirst for knowledge, continuous learning, and self-improvement.

Collaboration is key to our success. We prioritise open communication, constructive feedback, and a willingness to help others. We are committed to creating a supportive work environment that encourages excellence, innovation, and continuous improvement. We're looking for individuals who share our values and are excited to join us on our cyber mission.

Responsibilities

• Technical Leadership:
  • Recommend research directions, conceptualize new security tools, and mentor junior researchers.
  • Conduct internal training workshops on analysis techniques, vulnerabilities discovery, and mechanism.
• Research and Analysis:
  • Conduct in-depth research on applications, reverse engineer closed-source code, and identify exploitable weaknesses.
  • Continuously learn about the latest application security and reverse engineering techniques.
• Development:
  • Assess and verify security through design and execute tests against industry standards CIA triad: Confidentiality, Integrity, and Availability, plus Authorization and Non-repudiation).
  • Develop proof of concept (e.g. code, scripts) to demonstrate the severity of discovered vulnerabilities and propose mitigations.
  • Develop cutting-edge tools to streamline the analysis process and improve efficiency.
• Documentation and Reporting:
  • Document findings, methodologies, and recommendations for both technical staff and executive leadership.
  • Effectively communicate findings and strategy to stakeholders.
• Contribution:
  • Contribute to the Singapore cybersecurity community through publishing whitepapers, blog posts, or presenting findings at relevant conferences.

Minimum Qualifications

• Fluent in OOP such as C++, Windows or Linux APIs/syscalls and knowledge of common file formats, network protocols and encryption.
• - Demonstrated ability to:
• Reverse engineer C/C++ compiled binaries and recognize common algorithms and patterns in decompiled code.
• Perform type recovery on intermediate data structures and uncover logic and indirect calls within a module.
• Bypass common anti-RE and anti-debugging techniques and uncover original code obfuscated by a public obfuscator.
• - For a more senior role, we're looking for candidates who has the demonstrated ability to:
• Reverse engineer sophisticated software and other programs compiled in newer languages such as Golang, Rust, newer Pythons and non-C binaries.
• Recover complex code logic and indirect calls across multiple modules or files.
• Recover undocumented file format or encoded binaries through deep analysis of the program.
• Develop custom tools to recover the logic or emulate parts of the program.
• Uncover logic of heavily obfuscated or custom packed code.

Benefits

• Training & Development
• Performance Bonus
• Medical Benefits
• Hybrid Work Arrangements