Vulnerability Researcher

STAR LABS SG PTE. LTD.; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

STAR LABS SG PTE. LTD. is seeking researchers to collaborate on vulnerabilities and threats across diverse software and platforms.

The role involves fuzzing, reverse engineering, code audits, and PoC development to uncover security flaws in software and hardware. Ideal candidates have a strong passion for vulnerability research and offensive security, with experience in C, C++, Python, and related tooling. Open to entry, mid, senior, and principal levels, the team values depth of understanding

Qualifications

• Bachelor level degree or higher in information systems, computer science, computer engineering, information technology, mathematics, or equivalent.
• Strong interest and passion for vulnerability research and offensive security.
• Creative, innovative, self-motivated and able to work independently as well as within a team.

Responsibilities

• Collaborate with researchers to investigate vulnerabilities and threats across software and platforms.
• Conduct fuzzing, reverse engineering, and code audits to uncover security flaws in software and hardware.
• Perform security assessments through vulnerability research, black box testing, and PoC development.
• Develop PoC code and exploits and build end-to-end chains where relevant.
• Investigate security flaws and provide insights and remedies to counter cyber threats.
• Stay updated on security landscape, attack techniques, mitigations, and attack surface shifts.
• Research and engineer novel approaches to offensive security problems.

Skills

Vulnerability research

Offensive security

Problem solving

Independent work

Education

Degree in CS/IT

Tools

Binary Ninja

IDA Pro

Ghidra

Frida

Job description

Job Scope

• Collaborate with fellow researchers to investigate vulnerabilities and threats across a range of software and platforms
• Conduct fuzzing, reverse engineering, and code audit to uncover security flaws in software and hardware
• Perform security assessments through vulnerability research, black box testing, and proof-of-concept development
• Develop proof-of-concept code and exploits, and where relevant, work them up into reliable end-to-end chains
• Investigate security flaws found and provide insights and remedies to counter cyber threats
• Stay on top of developments in the security landscape such as new attack techniques, security mitigations, and shifts in the attack surface
• Research and engineer novel approaches to offensive security problems

Requirements

• Diploma/Degree in Information Systems, Computer Science, Computer Engineering, Information Technology, Mathematics, or equivalent
• Strong interest and passion for vulnerability research and offensive security
• Strong problem-solving and troubleshooting skills
• Creative, innovative, self-motivated, and able to work independently as well as within a broader team effort
• Knowledge of C, C++, Python, and/or ARM/AArch64 assembly would be an added advantage
• Knowledge of Android/iOS internals and security mitigations would be an added advantage
• Familiarity with reverse engineering tools (e.g. Binary Ninja, IDA, Ghidra, Frida)
• Good written English
• Entry-level, mid-level, senior, and principal positions available
• We weigh depth of understanding and quality of work over any specific credential. Strong candidates come from security research roles, CTF backgrounds, bug bounty work, academic research, or self-directed projects.