Senior Offensive Vulnerability Researcher

VetJobs; Columbus (OH); On-site; USD 100,000 - 140,000; Full time

Job summary

JP Morgan Chase in Columbus, OH seeks a seasoned XOR vulnerability researcher for assessments and exercises within Cybersecurity and Technology Controls. The role involves designing tests, conducting deep vulnerability research, and delivering detailed reports to strengthen the firm’s security posture.

The ideal candidate has 5+ years in cybersecurity, strong reverse engineering skills, and experience with IDA Pro, Ghidra, and Binary Ninja.

Qualifications

• 5+ years of experience in cybersecurity or resiliency with offensive security testing or simulations.
• Track record of discovered vulnerabilities (CVEs) in high-profile targets in OS, mobile, web, browsers, edge devices, or enterprise software.
• Proven hands-on experience in vulnerability research, exploit development, coordinated vulnerability disclosure, and mitigating vulnerabilities in open-source projects.
• Expertise with symbolic execution and dynamic binary instrumentation for vulnerability triage and exploitation.
• Hands-on exploitation of complex vulnerability classes and techniques to achieve reliable code execution.
• Strong OS internals knowledge across Windows, Linux, Android, macOS, or iOS.
• Experience auditing large C/C++, Java, and .NET codebases with automated analyzers and manual review.
• Excellent communication and ability to prepare reports and presentations for stakeholders.

Responsibilities

• Design and execute testing and simulations such as penetration tests and resiliency exercises.
• Evaluate controls for effectiveness and opportunities to automate evaluation.
• Conduct vulnerability research and exploit development across operating systems, devices, and applications.
• Reverse engineer binaries with IDA Pro, Ghidra, or Binary Ninja to identify attack surfaces and proofs-of-concept.
• Use fuzzers, disassemblers, debuggers, and code browsers for static and dynamic analysis.
• Perform N-day vulnerability analysis, patch diffing, and exploit validation.
• Collaborate to develop reports with findings, risk assessments, and remediation recommendations.
• Leverage threat intelligence to stay ahead of threats and improve assessment strategies.
• Document findings and workflows for knowledge sharing.

Skills

Vulnerability research

Reverse engineering

Static analysis

Dynamic analysis

Exploit development

C/C++

Java

.NET

OS internals

Threat intelligence

Education

High School diploma or GED

Bachelor's degree in CS or related field

Tools

IDA Pro

Ghidra

Binary Ninja

WinDbg

GDB

RR

LibFuzzer

AFL++

Job description

JP Morgan Chase in Columbus, OH seeks a seasoned XOR vulnerability researcher for assessments and exercises within Cybersecurity and Technology Controls. The role involves designing tests, conducting deep vulnerability research, and delivering detailed reports to strengthen the firm’s security posture.

The ideal candidate has 5+ years in cybersecurity, strong reverse engineering skills, and experience with IDA Pro, Ghidra, and Binary Ninja.