Remote Vulnerability Research Engineer: Exploit Dev & RE

Bugcrowd; Alabama; On-site; USD 154,800 - 193,500; Full time

Job summary

Bugcrowd is seeking a security researcher focused on end-to-end exploit development for real-world targets. The role entails designing, developing, and validating novel vulnerability discovery and exploitation capabilities across OS, binaries, and micro-architectural levels, with minimal supervision.

The position requires expert reverse engineering of binaries (x86-64, ARM64) using Binary Ninja, Ghidra, or IDA Pro, and proficiency in C, Python, and Assembly.

Qualifications

• Reverse engineer binaries (x86-64, ARM64) with tools like Binary Ninja, Ghidra, or IDA Pro.
• Identify and exploit real-world vulnerabilities such as Use-after-free, Type confusion, and Buffer overflow.
• Develop novel vulnerability discovery and exploitation capabilities.
• Proficient in C, Python, and Assembly.

Responsibilities

• Design, develop, and validate novel vulnerability discovery and exploitation capabilities.
• Conduct expert reverse engineering of binaries (x86-64, ARM64, etc.) using industry-standard tools.
• Identify and exploit real-world vulnerabilities such as Use-after-free, Type confusion, Integer truncation, and Buffer overflow.
• Demonstrate ability to discover new, novel vulnerabilities in complex systems.
• Rapidly understand current vulnerability research and apply findings to identify new instances of vulnerability classes.
• Employ both manual analysis and automated techniques (e.g., fuzzing) for vulnerability discovery.
• Code and debug complex functions in C, Python, and Assembly (x86-64, ARM, etc.).
• Independently manage and execute research objectives, including scoping, research, experimentation, validation, and iteration.
• Travel to customer sites as required and perform on-site work for extended periods of time.

Skills

Exploit Development

Reverse Engineering

Vulnerability Discovery

C

Python

Assembly

Autonomy

Binary Ninja

Ghidra

IDA Pro

Tools

Binary Ninja

Ghidra

IDA Pro

Job description

Bugcrowd is seeking a security researcher focused on end-to-end exploit development for real-world targets. The role entails designing, developing, and validating novel vulnerability discovery and exploitation capabilities across OS, binaries, and micro-architectural levels, with minimal supervision.

The position requires expert reverse engineering of binaries (x86-64, ARM64) using Binary Ninja, Ghidra, or IDA Pro, and proficiency in C, Python, and Assembly.