Cyber Vulnerability Researcher

Ensign InfoSecurity; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Ensign InfoSecurity is seeking a vulnerability researcher to perform code audit, reverse engineering, and black-box testing across operating systems, software, and hardware. You will help develop processes and tooling to triage vulnerabilities, while researching new discovery techniques.

Required experience includes strong reverse engineering skills, exploitation techniques, and hands-on use of static/dynamic analysis tools. Bachelor’s degree in CS or engineering is expected or equivalent.

Qualifications

• Bachelor's degree in computer science or engineering or equivalent.
• Strong reverse engineering skills and experience with complex software or OS components.
• Up-to-date knowledge of software vulnerabilities and vulnerability discovery across OS, software, or hardware.
• Hands-on experience with modern exploitation techniques and bypassing mitigations via PoCs.
• Experience with static and dynamic analysis tools and extending tools for vulnerability discovery.

Responsibilities

• Perform vulnerability research across operating systems, applications and hardware via code audit, black box testing and reverse engineering.
• Develop and improve processes and tooling for discovery and triage of vulnerabilities.
• Research new vulnerability discovery techniques and processes.

Skills

Reverse engineering

Vulnerability discovery

C/C++

Python

Exploit techniques

Static analysis

Dynamic analysis

Education

Bachelor's degree in CS or Engineering

Tools

Binary analysis tools

Job description

**Responsibilities:*** Perform research to discover vulnerabilities in operating systems, software applications and hardware devices through code audit, black box testing and reverse engineering* Develop and enhance processes and tools for the discovery and triage of vulnerabilities* Research into new vulnerability discovery techniques and processes**Requirements:*** Bachelor's degree in a computer science or engineering field or equivalent a minimum of 3 years of relevant experience* Strong reverse engineering skills and experienced in reverse engineering complex software applications or operating system components* Up-to-date knowledge on different type of software vulnerabilities, and experienced in performing vulnerability discovery on any operating system, software applications or hardware devices* Up-to-date knowledge on modern exploitation techniques and hands-on experience in bypassing exploitation mitigation technologies gained through developing proof-of-concept exploits* Experience in using and current static and dynamic software analysis tools and techniques in reverse engineering and vulnerability discovery process. Able to adapt and extend existing manual or automated tools to better support the work* Development experience in C /C++ or scripting languages (e.g. Python, Ruby)**About Ensign InfoSecurity**Ensign InfoSecurity is the largest pure-play cybersecurity service provider in Asia. The company is headquartered in Singapore. We specialise in the provision of these services; cybersecurity advisory and assurance, implementation and management of advanced cybersecurity controls, cybersecurity monitoring, threat hunting, and incident response. Underpinning these competencies is in-house research and development in cybersecurity.We are a technology company with warmth and soul. We are ambitious, propelled by our vision to be the cyber defender of choice, and fueled by the dedication and camaraderie of individuals who are eager to make a difference, and leave their footprints in the industry.If you are a self-motivated curious go-getter, we want You! Join Us!