Vulnerability Researcher (Remote)

Hire Feed; Pakistan; On-site; PKR 1,200,000 - 2,400,000; Full time

Job summary

Hire Feed seeks a Member of Technical Staff, Vulnerability Researcher to perform deep technical analyses, reverse engineering, and threat modeling across diverse systems and applications.

You will document findings, collaborate with engineering teams to remediate vulnerabilities, and stay current with emerging threats and attack techniques to strengthen overall security posture.

Qualifications

• Proficiency in programming languages such as C, C++, Python, or Go for vulnerability analysis and exploitation.
• Experience with reverse engineering tools like IDA Pro, Ghidra, or Binary Ninja.
• Knowledge of common vulnerability types, including buffer overflows, race conditions, and injection flaws.
• Familiarity with network protocols, operating systems internals, and memory corruption techniques.
• Hands‑on experience with fuzzing tools like AFL, LibFuzzer, or Honggfuzz.
• Understanding of secure coding practices and secure development lifecycle methodologies.
• Ability to produce clear, technical reports for stakeholders at varying levels of expertise.

Responsibilities

• Perform static and dynamic analysis of software to detect vulnerabilities in codebases and infrastructure.
• Develop proof-of-concept exploits to validate identified vulnerabilities and assess their impact.
• Collaborate with engineering teams to triage and prioritize security findings for remediation.
• Research emerging threats, attack vectors, and zero-day vulnerabilities in relevant technologies.
• Document findings, including technical details, risk assessments, and mitigation recommendations.

Skills

C/C++

Python

Go

Reverse engineering

Threat modeling

Fuzzing

Secure coding

Report writing

Tools

IDA Pro

Ghidra

Binary Ninja

AFL

LibFuzzer

Honggfuzz

Job description

We are hiring for one of our clients, seeking a Member of Technical Staff, Vulnerability Researcher to work on a full-time basis. The role involves conducting deep technical analysis to identify software vulnerabilities across systems and applications. Responsibilities include reverse engineering, code analysis, and threat modeling to assess potential security risks.

Key Responsibilities:

• Perform static and dynamic analysis of software to detect vulnerabilities in codebases and infrastructure.
• Develop proof-of-concept exploits to validate identified vulnerabilities and assess their impact.
• Collaborate with engineering teams to triage and prioritize security findings for remediation.
• Research emerging threats, attack vectors, and zero-day vulnerabilities in relevant technologies.
• Document findings, including technical details, risk assessments, and mitigation recommendations.

Required Skills & Qualifications:

• Proficiency in programming languages such as C, C++, Python, or Go for vulnerability analysis and exploitation.
• Experience with reverse engineering tools like IDA Pro, Ghidra, or Binary Ninja.
• Knowledge of common vulnerability types, including buffer overflows, race conditions, and injection flaws.
• Familiarity with network protocols, operating systems internals, and memory corruption techniques.
• Hands‑on experience with fuzzing tools like AFL, LibFuzzer, or Honggfuzz.
• Understanding of secure coding practices and secure development lifecycle methodologies.
• Ability to produce clear, technical reports for stakeholders at varying levels of expertise.

More About the Opportunity:

This role offers a unique opportunity to work with a global leader in the Technology, Information and Internet industry, contributing to enhanced security posture and risk mitigation for critical systems. The position involves direct collaboration with cross-functional teams to drive improvements in security architecture and incident response.

Equal Opportunity Employer:

We hire based on skills and expertise. All qualified candidates are welcome regardless of background, experience, or prior employment history. Applications are reviewed solely on demonstrated technical ability and qualifications.