Vulnerability Research Engineer

Role overview Research vulnerabilities and determine whether they can be exploited in practice. You’ll build and test proof-of-concept exploits, then improve the tools and agent capabilities used to assess real security risks.

Responsibilities - Investigate vulnerabilities, including newly disclosed issues and original findings, until their exploitability is clear. - Develop and validate working exploits and proof-of-concept code in isolated, controlled environments. - Build and harden the harness used to generate and test proof-of-concept exploits. - Translate offensive security methods into capabilities that agents can use. - Distinguish practical attack paths from theoretical risks, grounding assessments in evidence.

Requirements - Hands-on experience finding, developing, and testing exploits end to end. - Strong exploitation knowledge in at least one area, such as memory safety, web, cloud, or infrastructure, and an understanding of how attack paths connect. - Experience with reverse engineering, fuzzing, and building tools in languages such as Python, C, Rust, or Go. - Ability to demonstrate whether a vulnerability can be exploited, rather than relying on theoretical severity. - Sound judgment and rigor when working with exploits in controlled environments.