Senior Vulnerability Researcher

InnoEdge Labs; Santo Niño 1st; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

InnoEdge Labs is seeking security researchers to advance vulnerability discovery across software, hardware, and mobile platforms. You will analyze attack surfaces, reverse engineer, and apply static/dynamic techniques to surface security gaps.

The role emphasizes developing cutting-edge fuzzing and analysis tools, mentoring junior researchers, and sharing findings through blogs and talks, contributing to a collaborative cyber mission.

Qualifications

• Demonstrated ability to perform vulnerability discovery in modern software, hardware, or mobile devices.

Responsibilities

• Recommend direction for research projects and conceptualize new tools/techniques to enhance vulnerability discovery.
• Provide mentorship and guidance to new researchers in your main domain of research.
• Perform deep research to understand attack surface for potential exploitation.
• Reverse engineer and apply static and dynamic analysis to surface vulnerabilities.
• Develop cutting edge fuzzers and analysis tools to scale vulnerability discovery.
• Keep abreast of latest research in security vulnerabilities and detection techniques.
• Level up the local security community through mentorship, blogs, and conference talks.

Skills

Vulnerability research

Attack surface analysis

Reverse engineering

Static/dynamic analysis

Tools

Fuzzing tools

Analysis toolchains

Job description

At InnoEdge, we work with organisations to protect them from cyber threats. We help detect new unknown cyber threats through research, fortify networks, and defend critical information infrastructures. Based in Singapore, our team consists of cybersecurity experts who use the advanced techniques and technologies to deliver cutting-edge solutions and services.

InnoEdge believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries and have a thirst for knowledge, continuous learning, and self-improvement.

Collaboration is key to our success. We prioritise open communication, constructive feedback, and a willingness to help others. We are committed to creating a supportive work environment that encourages excellence, innovation, and continuous improvement. We’re looking for individuals who share our values and are excited to join us on our cyber mission.

Responsibilities

• Recommend direction for research projects and conceptualize new tools/techniques that will enhance the vulnerability discovery process.
• Provide mentorship and guidance to new researchers in your main domain of research.
• Perform deep research to understand possible attack surface for an attacker to abuse to gain access to a target system.
• Reverse engineer and/or apply static and/or dynamic analysis techniques on applications to surface vulnerabilities.
• Develop cutting edge fuzzers and static/dynamic analysis tools to scale up the vulnerability discovery process.
• Keep abreast of the latest research in security research and vulnerabilities detection techniques.
• Level up the local security community through mentorship of aspiring security researcher, publishing blog post and speaking at conferences.

Minimum Qualifications:

• Demonstrated ability to perform the following tasks to find bugs in modern software, hardware, or mobile devices.

1. Perform attack surface analysis and prioritize areas to investigate for possible vulnerabilities.
2. Independently apply various vulnerability discovery techniques.
3. Discover and exploit vulnerabilities.

• Deep understanding of internals and common exploitation techniques for area of expertise (i.e. Windows, Android, Browser, …)
• Track record of having found security vulnerabilities in the last 4 years.

For a more senior role, we’re looking for candidates who have track records in these areas:

• Consistency in discovering security-related vulnerabilities and demonstrating their impact.
• Performing research on Windows/Android/iOS/Linux Kernel or a complex application by a major vendor, applying attack surface analysis and prioritisation, and performing various static and dynamic analysis techniques to find bugs in the different components.
• Discovering and exploiting security vulnerabilities in Windows/Android/iOS/Linux Kernel or a complex application by a major vendor.

We offer competitive compensation, a comprehensive benefits package, and a collaborative and dynamic work environment.