Vulnerability Researcher & Exploit Engineer

The Josef Group; United States; Remote; USD 110,000 - 180,000; Full time

Job summary

The Josef Group is seeking a Vulnerability Researcher or Exploit Engineer to join our security research team. You will identify and analyze vulnerabilities in mobile (Android, iOS) and desktop (Windows) platforms, and develop exploit demonstrations to advance defensive capabilities.

Candidates should demonstrate hands-on experience with at least one target platform, strong knowledge of OS internals, and proficiency in reverse engineering and scripting.

Qualifications

• Experience on Android, iOS or Windows platforms.
• Strong understanding of OS internals.
• Proficient with reverse engineering tools.
• Programming/scripting in C/C++, Python, or Java.
• Familiar with vulnerability classes and exploits.
• Able to communicate findings clearly in writing and presentations.
• Citizenship and ability to obtain government clearance.

Responsibilities

• Conduct security research on mobile and desktop platforms to identify vulnerabilities.
• Develop proof-of-concept exploits and demonstrations.
• Perform reverse engineering and binary analysis.
• Analyze architecture, libraries, and kernel components.
• Document findings with vulnerability chain analysis and impact.
• Contribute to automated tools for discovery and exploitation.
• Collaborate with cross-functional teams to understand requirements.
• Stay current with platform updates, patches, and vulnerability classes.

Skills

Platform experience

OS internals

Reverse engineering

Programming languages

Vulnerability exploitation

Technical communication

Secure handling

Clearance eligibility

Tools

Debuggers

Disassemblers

Binary instrumentation

Job description

The Josef Group is seeking a Vulnerability Researcher or Exploit Engineer to join our security research team. You will identify and analyze vulnerabilities in mobile (Android, iOS) and desktop (Windows) platforms, and develop exploit demonstrations to advance defensive capabilities.

Candidates should demonstrate hands-on experience with at least one target platform, strong knowledge of OS internals, and proficiency in reverse engineering and scripting.