Staff Security Researcher: Emergent Threats & Metasploit

mymoose; United States; On-site; USD 180,000 - 260,000; Full time

Job summary

Rapid7 is seeking an experienced vulnerability researcher to lead Emergent Threat Response work and contribute to Metasploit, with zero-day research as a secondary focus. The role emphasizes rapid n-day analysis, exploit development, and attacker-focused vulnerability intelligence.

You will reproduce vulnerabilities from patches, publish rigorous analyses, and advise detection engineers while mentoring other researchers and presenting findings to diverse audiences.

Qualifications

• Expertise across vulnerability classes and exploitation techniques.
• Ability to reproduce vulnerabilities and attacks quickly and effectively.
• Strong reverse engineering and binary/code diffing skills.
• Outstanding written and verbal communication for diverse audiences.

Responsibilities

• Rapidly analyze newly disclosed and exploited vulnerabilities to determine root cause and impact.
• Reproduce vulnerabilities and build working exploits from patches and advisories.
• Publish clear, technically rigorous root cause analyses for defenders.
• Advise detection and vulnerability teams on urgency and prioritization.
• Serve as go-to expert during high-velocity events (e.g., Log4Shell).
• Develop and contribute high-quality Metasploit exploit modules.
• Review community/internal contributions and raise code quality and stability.
• Collaborate with Metasploit engineering on roadmap priorities.

Skills

Vuln analysis

Exploit development

Reverse engineering

OS internals

Public talks

Mentoring

Clear communication

Tools

Metasploit Framework

Job description

Rapid7 is seeking an experienced vulnerability researcher to lead Emergent Threat Response work and contribute to Metasploit, with zero-day research as a secondary focus. The role emphasizes rapid n-day analysis, exploit development, and attacker-focused vulnerability intelligence.

You will reproduce vulnerabilities from patches, publish rigorous analyses, and advise detection engineers while mentoring other researchers and presenting findings to diverse audiences.