Investigador de Vulnerabilidades

Kroll; United States; Remote; USD 120.000 - 180.000; Vollzeit

Benefits dieser Stelle

Exploit development

Kernel/browser internals

Conference talks

Zusammenfassung

Kroll is seeking a security research engineer to lead fuzzing campaigns against complex software targets in the United States. You will design targets, build scalable fuzzing harnesses, and triage crashes to determine exploitability.

The role emphasizes practical reverse engineering, C and systems programming skills, and credible vulnerability demonstrations. Collaborate on coordinated disclosure with vendors to drive fixes and share validated results.

Qualifikationen

• Reverse engineer in a real disassembler.
• C and one systems language required.
• A credited CVE, or equivalent depth work you can discuss.

Aufgaben

• Choose targets and justify the choice.
• Build fuzzing harnesses and triage around them.
• Take findings through coordinated disclosure to a fix.

Kenntnisse

Reverse engineering

C language

Systems programming

Ausbildung

Bachelor's in CS/Engineering

Tools

IDA Pro

Ghidra

Jobbeschreibung

You choose research targets, build the tooling to test them at scale (typically fuzzing harnesses), run those campaigns over days or weeks, and analyse the crashes that come out to determine which are exploitable. Most results are not security-relevant; the role exists for the small proportion that are. Confirmed findings are taken through coordinated disclosure with the vendor until a fix is released.

What you will do:

• Choose targets and justify the choice
• Build fuzzing harnesses and the triage around them
• Take findings through coordinated disclosure to a fix

What they ask for:

• Reverse engineering in a real disassembler
• C and one systems language
• A credited CVE, or work you can walk through in equivalent depth

Nice to have:

• Exploit development
• Kernel or browser internals
• Conference talks