X-Day Offensive Vulnerability Researcher

VetJobs; Tampa (FL); On-site; USD 100,000 - 150,000; Full time

Job summary

JP Morgan Chase in Tampa, FL is seeking an X-Day Offensive Research (XOR) Vulnerability Researcher - Assessments & Exercises to advance the firm’s cybersecurity posture by conducting risk-driven assessments and developing proof-of-concept exploits.

You will work closely with research and defense teams, performing reverse engineering, static and dynamic analysis, and vulnerability research to identify novel attack surfaces and deliver remediation guidance.

Qualifications

• 5+ years in cybersecurity or resiliency with offensive security testing experience.
• Proven vulnerability discovery (CVEs) in OS, mobile, web, or enterprise software.
• Hands-on exploitation and coordinated vulnerability disclosure.
• Experience with symbolic execution & dynamic binary instrumentation.
• Strong knowledge of OS internals (Windows, Linux, macOS, etc.).

Responsibilities

• Design and execute testing and simulations (penetration tests, assessments, cyber exercises).
• Evaluate controls for effectiveness and automate evaluation where possible.
• Perform vulnerability research, exploit development, and validation.
• Reverse engineer binaries to identify attack surfaces and PoCs.
• Produce reports with findings, risk assessments, and remediation guidance.
• Collaborate on threat intelligence to enhance assessment strategies.

Skills

vulnerability research

reverse engineering

exploit development

static analysis

dynamic analysis

threat modeling

communication

incident response

report writing

team collaboration

Education

Bachelor's degree in computer science

PhD in related field

High School/GED

Tools

IDA Pro

Ghidra

Binary Ninja

WinDbg

GDB

RR

Job description

JP Morgan Chase in Tampa, FL is seeking an X-Day Offensive Research (XOR) Vulnerability Researcher - Assessments & Exercises to advance the firm’s cybersecurity posture by conducting risk-driven assessments and developing proof-of-concept exploits.

You will work closely with research and defense teams, performing reverse engineering, static and dynamic analysis, and vulnerability research to identify novel attack surfaces and deliver remediation guidance.