Offensive Vulnerability Researcher – Exploit Discovery

VetJobs; Wilmington (DE); On-site; USD 90,000 - 110,000; Full time

Job summary

JP Morgan Chase in Wilmington, Delaware is seeking an X-Day Offensive Research (XOR) Vulnerability Researcher - Assessments & Exercises to strengthen our cybersecurity posture. You will design and execute risk-driven assessments, explore novel attack surfaces, and lead analysis with a team of researchers to deliver actionable findings.

The role requires deep reverse engineering, static and dynamic analysis, exploit development, and strong communication to produce clear risk assessments and

Qualifications

• Minimum education is High School or GED.
• 5+ years in cybersecurity or resiliency with offensive testing.
• Proven vulnerability discovery and exploit development experience.
• Experience with reverse engineering and advanced analysis frameworks.
• Familiarity with OS internals and memory corruption exploits.
• Ability to document findings and communicate risk.

Responsibilities

• Design and execute testing and simulations – such as penetration tests, technical controls assessments, cyber exercises, or resiliency simulations – and contribute to the development and refinement of assessment methodologies, tools, and frameworks to ensure alignment with the firm’s strategy and compliance with regulatory requirements.
• Evaluate controls for effectiveness and impact on operational risk, as well as opportunities to automate control evaluation.
• Conduct in-depth vulnerability research and exploit development across a broad range of categories, including operating systems, mobile devices, web applications, browsers, edge devices, and enterprise software.
• Reverse engineer binaries using tools such as IDA Pro, Ghidra, or Binary Ninja to identify novel attack surfaces and develop proof-of-concept exploits.
• Use common vulnerability research toolsets such as fuzzers, disassemblers, debuggers, and code browsers for static and dynamic analysis.
• Perform N-day vulnerability analysis, patch diffing, and proof-of-concept exploit validation.
• Collaborate with cross-functional teams to develop comprehensive reports – including detailed findings, risk assessments, and remediation recommendations – supporting vulnerability triage, patch prioritization, and the sharing of indicators of compromise (IOCs) in service of the firm's mission requirements.
• Leverage threat intelligence and security research to stay ahead of emerging threats, vulnerabilities, industry best practices, and regulations, applying this knowledge to enhance the firm's assessment strategy and risk management, and engaging with peers and industry groups that share threat intelligence analytics.
• Document research findings, proof-of-concepts, and technical workflows to enable knowledge sharing and repeatability.

Skills

Offensive security testing

Vulnerability research

Exploit development

Reverse engineering

Static analysis

Dynamic analysis

C/C++/Java/.NET codebases

OS internals (Windows/Linux/macOS)

Education

Bachelor's degree (preferred)

High School/GED

Tools

IDA Pro

Ghidra

Binary Ninja

WinDbg

GDB

RR

Job description

JP Morgan Chase in Wilmington, Delaware is seeking an X-Day Offensive Research (XOR) Vulnerability Researcher - Assessments & Exercises to strengthen our cybersecurity posture. You will design and execute risk-driven assessments, explore novel attack surfaces, and lead analysis with a team of researchers to deliver actionable findings.

The role requires deep reverse engineering, static and dynamic analysis, exploit development, and strong communication to produce clear risk assessments and