Senior Offensive Vulnerability Researcher

JPMorgan Chase & Co.; Jersey City (NJ); On-site; USD 150,000 - 230,000; Full time

Job summary

JPMorganChase is seeking an X-Day Offensive Research vulnerability researcher to advance the firm’s cybersecurity posture through rigorous assessments, simulations, and research-driven approaches.

You will collaborate with defense teams to investigate targets, uncover novel attack surfaces, and develop solutions that meet regulatory requirements and risk-management goals. Strong reverse engineering and diagnostic analysis skills are essential.

Qualifications

• 5+ years of experience in cybersecurity or resiliency, with demonstrated exceptional organizational skills to plan, design, and coordinate the development of offensive security testing, assessments, or simulation exercises.
• Track record of discovered vulnerabilities (CVEs) in high-profile targets in OS, mobile, web, browsers, edge devices, or enterprise software.
• Hands-on vulnerability research, exploit development, coordinated vulnerability disclosure, and mitigating vulnerabilities in open-source projects.
• Expertise in advanced analysis frameworks leveraging symbolic execution and dynamic binary instrumentation.
• Experience exploiting complex vulnerability classes and applying advanced exploitation techniques.
• Strong OS internals knowledge across Windows and Unix-like systems.
• Experience auditing large C/C++, Java, and .NET codebases for memory-safety, injection, and deserialization vulnerabilities.

Responsibilities

• Design and execute testing and simulations such as penetration tests and resiliency exercises, aligning with firm strategy and regulatory requirements.
• Evaluate controls for effectiveness and opportunities to automate assessment.
• Conduct vulnerability research and exploit development across OS, mobile, web applications, and enterprise software.
• Reverse engineer binaries to identify attack surfaces and develop proof-of-concept exploits.
• Collaborate with teams to produce findings, risk assessments, and remediation recommendations.

Skills

Offensive security testing

Vulnerability research

Exploit development

Reverse engineering

Static/dynamic analysis

C/C++, Java, .NET

OS internals (Windows, Linux, macOS)

Threat modeling

Communication & reporting

Education

Bachelor’s degree in computer science

Tools

IDA Pro

Ghidra

Binary Ninja

WinDbg

GDB

RR

Fuzzers

Disassemblers

Debuggers

Job description

JPMorganChase is seeking an X-Day Offensive Research vulnerability researcher to advance the firm’s cybersecurity posture through rigorous assessments, simulations, and research-driven approaches.

You will collaborate with defense teams to investigate targets, uncover novel attack surfaces, and develop solutions that meet regulatory requirements and risk-management goals. Strong reverse engineering and diagnostic analysis skills are essential.