Offensive Vulnerability Researcher — Cyber Assessments

VetJobs

Houston (TX)

On-site

USD 90,000 - 110,000

Full time

4 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

JPMorgan Chase is seeking an X-Day Offensive Research (XOR) Vulnerability Researcher for Assessments & Exercises within Cybersecurity & Technology Controls. You will design and deploy risk-driven assessments, lead or coordinate a skilled team, and clearly outline root causes of vulnerabilities.

Responsibilities include executing simulations, evaluating controls, conducting in-depth vulnerability research, and producing comprehensive reports with remediation guidance to strengthen the firm’s

Qualifications

5+ years in cybersecurity or resiliency with offensive testing experience.
Proven vulnerability discovery (CVEs) in OS, mobile, web, or enterprise software.
Hands-on vulnerability research, exploit development, and coordinated disclosure.
Experience with symbolic execution and dynamic binary instrumentation techniques.
Deep knowledge of Windows, Linux, Android, macOS, or iOS internals.

Responsibilities

Design and run testing and simulations (penetration tests, assessments, cyber exercises).
Evaluate controls for effectiveness and impact on operational risk.
Conduct vulnerability research and develop proof-of-concept exploits.
Reverse engineer binaries to identify attack surfaces and PoCs.
Prepare reports with findings, risk, and remediation recommendations.
Share threat intelligence to enhance assessment strategy and risk management.
Document workflows to enable knowledge sharing and repeatability.