X-Day Vulnerability Researcher – Cyber Resilience

VetJobs; Atlanta (GA); On-site; USD 100,000 - 150,000; Full time

Job summary

JP Morgan Chase in Atlanta, Georgia is seeking a dedicated X-Day Offensive Research vulnerability researcher to assess and exercise security controls. You will design risk-driven assessments, conduct advanced vulnerability research, and develop exploit concepts to strengthen the firm's security posture.

Candidates will reverse engineer binaries with IDA Pro, Ghidra, and Binary Ninja, perform static and dynamic analysis, and document findings with clear risk assessments and remediation

Qualifications

• 5+ years of experience in cybersecurity or resiliency.
• Track record of CVEs in high-profile targets in OS, mobile, web, browsers, edge devices or enterprise software.
• Hands-on vulnerability research and exploit development experience.
• Expertise in symbolic execution and dynamic binary instrumentation.
• Proficient in exploiting complex vulnerability classes and advanced techniques.
• Strong OS internals knowledge across two or more OSes.
• Experience auditing large C/C++, Java, and .NET codebases.
• Reverse engineering across x86/x64 and ARM binaries with IDA Pro, Ghidra, Binary Ninja.
• Knowledge of US financial services security practices and risk management.
• Excellent communication and report writing skills.

Responsibilities

• Design and execute testing and simulations and refine assessment methodologies.
• Evaluate controls for effectiveness and automation opportunities.
• Conduct in-depth vulnerability research and exploit development.
• Reverse engineer binaries to identify attack surfaces and PoC exploits.
• Use fuzzers, disassemblers, debuggers, and code browsers for analysis.
• Perform N-day vulnerability analysis and patch diffing.
• Collaborate to produce detailed reports with findings and remediation recommendations.
• Leverage threat intelligence to enhance assessment strategy.
• Document research findings and workflows for knowledge sharing.

Skills

Vulnerability research

Exploit development

Reverse engineering

Static analysis

Dynamic analysis

OS internals knowledge

Code analysis (C/C++, Java, .NET)

Report writing

Communication skills

Education

Bachelor’s degree in computer science

PhD in related field

High School/GED

Tools

IDA Pro

Ghidra

Binary Ninja

WinDbg

GDB

RR

LibFuzzer

LibAFL

AFL++

OSS-Fuzz

Syzkaller

Angr

KLEE

Frida

DynamoRIO

Job description

JP Morgan Chase in Atlanta, Georgia is seeking a dedicated X-Day Offensive Research vulnerability researcher to assess and exercise security controls. You will design risk-driven assessments, conduct advanced vulnerability research, and develop exploit concepts to strengthen the firm's security posture.

Candidates will reverse engineer binaries with IDA Pro, Ghidra, and Binary Ninja, perform static and dynamic analysis, and document findings with clear risk assessments and remediation