Browser Vulnerability Researcher

Census SA; United States; Remote; USD 140,000 - 210,000; Full time

Benefits offered by this job

Birthday Paid Day off

Private Medical and Life Insurance

Funded certifications & postgraduate

Recognition programs

Job summary

CENSUS is seeking a Vulnerability Researcher specializing in modern web browsers and browser exploitation. You will identify, analyze, and demonstrate security vulnerabilities in rendering engines, JavaScript engines, IPC systems, sandboxing, and platform integrations.

The role requires auditing large C/C++ codebases, reverse engineering browser components, and developing PoCs and exploits. Strong knowledge of memory management, OS internals, and debugging tools is essential.

Qualifications

• Strong knowledge of C/C++ and x64/aarch64 assembly.
• Excellent understanding of memory management, pointers, object lifetime, and concurrency.
• Strong knowledge of operating-system internals, particulary Android and iOS.
• Experience with reverse engineering tools such as IDA Pro, Ghidra, Binary Ninja, or similar.
• Familiarity with browser architecture and multi-process sandbox designs.
• Experience analyzing large codebases.
• Knowledge of common memory-corruption vulnerability classes and exploitation techniques.
• Familiarity with debugging and sanitization tools such as ASan, UBSan, WinDbg, GDB, or LLDB.
• Ability to independently investigate complex technical problems and document findings clearly.

Responsibilities

• Research security vulnerabilities in modern browsers such as Firefox, Chromium-based and WebKit-based browsers.
• Perform source-code auditing of large C/C++ codebases to identify memory-safety, logic, sandbox, and privilege-boundary vulnerabilities.
• Investigate JavaScript engine internals such as V8, SpiderMonkey, or JavaScriptCore.
• Analyze browser sandbox boundaries and investigate sandbox escape vulnerabilities.
• Reverse engineer browser binaries and security-relevant operating-system components.
• Debug crashes and memory-corruption issues using tools such as WinDbg, GDB, LLDB, AddressSanitizer, and related tooling.
• Develop fuzzers, harnesses, and automation for vulnerability discovery.
• Study exploit mitigations such as ASLR, DEP/NX, Control Flow Guard, CET, CFI, MTE/MIE, pointer authentication, and sandboxing.
• Develop proof-of-concept exploits to validate vulnerabilities and understand their practical impact.
• Produce clear technical reports describing vulnerability root cause, exploitability and affected components.

Skills

C/C++

x64/aarch64 assembly

Memory management

OS internals

Reverse engineering

Browser architecture

Large codebases

Debugging tools

Fuzzing

Tools

IDA Pro

Ghidra

Binary Ninja

WinDbg

GDB

LLDB

Job description

CENSUS is an internationally acclaimed Cybersecurity services provider. We support the needs of multiple industries, providing IT and OT security assessment services to public and private organizations around the world, including international financial institutions and Fortune 500 companies. Powered by cutting-edge research, scientific analysis, and real-world engineering, we deliver unparalleled security assessment services for software, devices, infrastructure, and organizations. Learn more about CENSUS at census-labs.com.

About the Role

CENSUS is looking for a Vulnerability Researcher specializing in modern web browsers and browser exploitation.

The role focuses on identifying, analyzing, and demonstrating security vulnerabilities in complex browser components such as rendering engines, JavaScript engines, IPC systems, sandboxing mechanisms, and platform integrations.

Responsibilities

• Research security vulnerabilities in modern browsers such as Firefox, Chromium-based and WebKit-based browsers.
• Perform source-code auditing of large C/C++ codebases to identify memory-safety, logic, sandbox, and privilege-boundary vulnerabilities.
• Investigate JavaScript engine internals such as V8, SpiderMonkey, or JavaScriptCore.
• Analyze browser sandbox boundaries and investigate sandbox escape vulnerabilities.
• Reverse engineer browser binaries and security-relevant operating-system components.
• Debug crashes and memory-corruption issues using tools such as WinDbg, GDB, LLDB, AddressSanitizer, and related tooling.
• Develop fuzzers, harnesses, and automation for vulnerability discovery.
• Study exploit mitigations such as ASLR, DEP/NX, Control Flow Guard, CET, CFI, MTE/MIE, pointer authentication, and sandboxing.
• Develop proof-of-concept exploits to validate vulnerabilities and understand their practical impact.
• Produce clear technical reports describing vulnerability root cause, exploitability and affected components.

Required Skills

• Strong knowledge of C/C++ and x64/aarch64 assembly.
• Excellent understanding of memory management, pointers, object lifetime, and concurrency.
• Strong knowledge of operating-system internals, particulary Android and iOS.
• Experience with reverse engineering tools such as IDA Pro, Ghidra, Binary Ninja, or similar.
• Familiarity with browser architecture and multi-process sandbox designs.
• Experience analyzing large codebases.
• Knowledge of common memory-corruption vulnerability classes and exploitation techniques.
• Familiarity with debugging and sanitization tools such as ASan, UBSan, WinDbg, GDB, or LLDB.
• Ability to independently investigate complex technical problems and document findings clearly.

Preferred Skills

Experience researching Chrome, Firefox, Safari.

Experience developing browser exploits or participating in vulnerability disclosure / bug-bounty programs.

Experience with coverage-guided fuzzing tools such as libFuzzer, AFL++, or custom fuzzing frameworks.

Familiarity with modern exploit-development techniques including heap manipulation, arbitrary read/write primitives, information leaks, and control-flow manipulation.

Knowledge of compiler-generated mitigations and browser hardening mechanisms.

What We Offer

Please note that some of the benefits listed below are applicable only to full-time employees in locations where CENSUS has a legal entity.

The chance to be part fast-growing, global cybersecurity company

A collaborative, purpose-driven team with a strong learning mindset

Competitive salary and benefits, such as but not limited to:

• Birthday Paid Day off
• Coffee, lunch and office snacks free of charge
• Private Medical and Life Insurance covering employees & family members
• Funded certifications & postgraduate programs
• Recognition programs including a welcome gift, a new year celebration gift, referral bonus and long service vouchers
• Exposure to international teams, leaders, and challenges
• Opportunities for professional growth, development, innovation, and more!

LI | Remote

CENSUS is an equal opportunity employer. The Company does not discriminate on the basis of race, color, creed, pregnancy, religion, gender, national origin, age, disability, marital, or any other legally protected status. The Company also makes reasonable accommodations for disabled employees. Finally, the Company prohibits the harassment of any individual based on their protected status. This policy applies to all areas of personnel actions including recruitment, hiring, training, promotion, compensation, benefits, transfer, and social and recreational programs.