Senior Offensive Vulnerability Researcher

Next Frontier Capital; McLean (VA); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Health care

On-site health center

Retirement plan

Backup childcare

Tuition reimbursement

Mental health support

Financial coaching

Job summary

JPMorganChase is seeking an X-Day Offensive Research Vulnerability Researcher to advance the firm’s cybersecurity posture through risk-driven assessments and innovative vulnerability discovery. You will investigate targets, develop PoC exploits, and produce detailed reports for remediation and risk management.

The role requires deep reverse engineering expertise, OS internals knowledge, and collaboration with defense teams to stay ahead of emerging threats and ensure regulatory compliance.

Qualifications

• 5+ years in cybersecurity or resiliency with offensive security testing experience.
• Track record of CVEs in OS, mobile, web, browsers, edge devices, or enterprise software.
• Proven vulnerability research, exploit development, and coordinated disclosure experience.
• Experience with symbolic execution and dynamic binary instrumentation.

Responsibilities

• Design and execute risk-driven assessments and simulations, including penetration tests and resiliency exercises.
• Evaluate control effectiveness and automation opportunities.
• Perform in-depth vulnerability research across OS, mobile, web, and enterprise software.
• Reverse engineer binaries to identify attack surfaces and develop PoC exploits.
• Collaborate with teams to deliver comprehensive reports with risk assessments and remediation guidance.
• Share threat intelligence and stay ahead of emerging threats.

Skills

Offensive security

Vulnerability research

Reverse engineering

Exploit development

Binary analysis

OS internals

Security reporting

Communication

Education

Bachelor’s or PhD in CS or related field

Tools

IDA Pro

Ghidra

Binary Ninja

WinDbg

GDB

Job description

JPMorganChase is seeking an X-Day Offensive Research Vulnerability Researcher to advance the firm’s cybersecurity posture through risk-driven assessments and innovative vulnerability discovery. You will investigate targets, develop PoC exploits, and produce detailed reports for remediation and risk management.

The role requires deep reverse engineering expertise, OS internals knowledge, and collaboration with defense teams to stay ahead of emerging threats and ensure regulatory compliance.