Senior Exploit Research Engineer (Remote)

VulnCheck Inc.; United States; Remote; USD 180,000 - 260,000; Full time

Benefits offered by this job

Unlimited PTO

Parental leave

Healthcare coverage

401(k) match

Job summary

vulncheck is seeking a senior exploit developer for the Initial Access Intelligence team. The role focuses on reverse engineering and crafting original exploit code where public PoC is missing, spanning from root-cause analysis to detection engineering.

This fully remote position is within the United States, with priority for candidates in Massachusetts, Maryland, or Austin, Texas. You will contribute to an open-source exploit framework and develop ASM queries and detection rules to surface

Qualifications

• Experience writing exploit code for remote-code-execution and initial access vulnerabilities without authentication.
• Strong reverse engineering skills with a track record of producing working exploit code.
• Experience working on technical projects remotely, independently, and in small teams.
• Ability to share example exploit code as part of the application process.

Responsibilities

• Reverse engineer software to identify the root cause of vulnerabilities.
• Author original exploits for initial access vulnerabilities when little or no public PoC exists.
• Implement network and host detections (Suricata/Snort, YARA) to identify exploitation on the wire.
• Write Attack Surface Management queries using Shodan, Censys, FOFA, and ZoomEye to surface vulnerable systems.
• Contribute to local and other exploit types, and to an open-source exploit framework.

Skills

Exploit development experience

Reverse engineering

Remote work experience

Code sharing during application

Job description

vulncheck is seeking a senior exploit developer for the Initial Access Intelligence team. The role focuses on reverse engineering and crafting original exploit code where public PoC is missing, spanning from root-cause analysis to detection engineering.

This fully remote position is within the United States, with priority for candidates in Massachusetts, Maryland, or Austin, Texas. You will contribute to an open-source exploit framework and develop ASM queries and detection rules to surface