Lead Vulnerability Researcher

Lead Vulnerability Researcher Overview

• As a Lead Vulnerability Researcher, you will spearhead efforts to analyze and counteract malicious software threats.
• Develop operationally critical cyber capabilities to enhance security measures and mitigate vulnerabilities effectively.
• Collaborate with cross-functional teams to design, develop, and deploy advanced cybersecurity tools and techniques.
• Utilize your expertise in reverse engineering and assembly language to identify and address security risks.
• Engage in continuous learning to stay ahead of emerging threats and evolving cybersecurity technologies.
• Contribute to the development of secure cryptographic primitives and defeat common anti-reverse engineering techniques.
• Work on-site to ensure seamless collaboration and effective communication with stakeholders and team members.

Lead Vulnerability Researcher Key Responsibilities & Duties

• Analyze malicious software to identify vulnerabilities and develop countermeasures.
• Design and implement tools for command and control, persistence, and networking.
• Reverse engineer compiled programs using advanced debugging and decompiling tools.
• Develop and defeat mitigations such as ASLR, DEP, and obfuscation techniques.
• Utilize program analysis tools for control flow, program slicing, and taint tracing.
• Implement secure cryptographic primitives and analyze embedded platforms.
• Effectively communicate findings and strategies with customers and team members.
• Leverage automated analysis tools such as fuzzers, emulation, and sandboxes.

Lead Vulnerability Researcher Job Requirements

• Bachelor of Science (BS) degree in a relevant field is required.
• Minimum of 7 years of experience in cybersecurity, with 10 years preferred.
• Proficiency in reverse engineering, assembly languages, and scripting languages like Python.
• Experience with debuggers and decompilers such as gdb, Binja, and IDA Pro.
• Knowledge of program analysis tools and techniques, including control flow and taint tracing.
• Understanding of embedded platforms, file systems, and cryptographic primitives.
• Ability to develop and defeat mitigations like ASLR and DEP effectively.
• Strong communication skills to collaborate with customers and teammates.