Lead Offensive Vulnerability Researcher

VetJobs; Chicago (IL); On-site; USD 110,000 - 140,000; Full time

Job summary

JPMorgan Chase in Chicago, IL seeks an X-Day Offensive Research Vulnerability Researcher to advance its cybersecurity posture. You will design and deploy risk-driven assessments, investigate targets, and develop PoCs using IDA Pro, Ghidra, and other tools.

Collaboration across teams is essential to produce actionable risk analyses and remediation guidance. The role requires deep expertise in vulnerability research, exploitation techniques, and OS internals, with a strong track record of CVEs and

Qualifications

• 5+ years of experience in cybersecurity or resiliency and offensive security testing
• Track record of discovered CVEs in OS, mobile, web apps, browsers, edge devices, or enterprise software
• Hands-on vulnerability research and exploit development with CVE mitigation experience
• Experience with symbolic execution and dynamic binary instrumentation
• Proficiency in exploiting complex vulnerability classes and advanced exploitation techniques
• Understanding of Windows/Linux/macOS/iOS internals
• Experience auditing large C/C++, Java, and .NET codebases for memory-safety and deserialization issues
• Reverse engineering expertise on x86/x64 and ARM binaries with multiple tooling

Responsibilities

• Design and execute testing and simulations including penetration tests and cyber exercises
• Evaluate controls for effectiveness and opportunities to automate evaluation
• Conduct vulnerability research and exploit development across targets
• Reverse engineer binaries to identify novel attack surfaces and PoCs
• Use fuzzers, disassemblers, debuggers, and code browsers for analysis
• Perform N-day vulnerability analysis and patch diffing
• Collaborate to develop reports with findings, risk assessments, and remediation recommendations
• Leverage threat intelligence to stay ahead of emerging threats
• Document research findings and workflows for knowledge sharing

Skills

Vulnerability research

Reverse engineering

Exploit development

Static/dynamic analysis

Threat intel

Education

High School/GED

Bachelor’s degree

Tools

IDA Pro

Ghidra

Binary Ninja

WinDbg

GDB

RR

Job description

JPMorgan Chase in Chicago, IL seeks an X-Day Offensive Research Vulnerability Researcher to advance its cybersecurity posture. You will design and deploy risk-driven assessments, investigate targets, and develop PoCs using IDA Pro, Ghidra, and other tools.

Collaboration across teams is essential to produce actionable risk analyses and remediation guidance. The role requires deep expertise in vulnerability research, exploitation techniques, and OS internals, with a strong track record of CVEs and